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Blade  clients  anyone?  HP  is  set  to  offer  a 

blade  PC  that  promises  to  ease  desktop  management  PAGE  8. 


Strange  bedfellows  Sarbanes-Oxley  is  making  IT 

and  finance  departments  work  together  like  never  before.  PAGE  28. 


At  least  10  vendors  have 
jumped  on  the  WLAN 
switch  bandwagon.  In 
this  Technology  Insider, 
we  describe  the  players 
and  how  they're 
attempting  to  stand  out 
from  the  crowd. 


Page  43. 


Aruba’s  new  switch  and 
802.11  a/b  access  point. 


Users  still  bullish 
on  Web  services 


■  BY  JOHN  FONTANA 

Galileo  International  hit  a 
home  run  last  year  with  a  pilot  of 
four  Web  ser¬ 
vices  designed 
to  help  extend 
the  reach  of  its 
travel  booking 
and  itinerary 
services. 

The  number  of  Galileo  cus¬ 
tomers  using  the  services  — 
now  in  production  mode  —  has 
risen  from  one  to  35,  and  those 
customers  are  clamoring  for 
more.  The  company  buoyed  by 
cost  savings  and  new  business 
opportunities  associated  with  the 
project,  last  week  started  rolling 
out  Web  services  globally  Galileo 


also  is  taking  the  next  step  by 
building  a  service-oriented  archi¬ 
tecture  (SOA)  for  use  across  the 
Travel  Distribution  Services  divi¬ 
sion  of  parent- 
company 
Cendant. 

“Getting  into 
this  game  was 
the  most  im¬ 
portant  step,”  says  Todd  Dubner, 
vice  president  of  product  inno¬ 
vation  for  the  Parsippany,  N.J., 
company  “Now  that  we  are  in  it, 
we  are  reaping  rewards  that  we 
could  not  forecast  a  year  and  a 
half  ago.” 

Galileo  was  one  of  three  Web 
services  pioneers  profiled  by 
Network  World  about  a  year  ago 

See  Web  services,  page  64 


WebSen/ices 

REVISITED 


T picky  worm 
triggers  new 
P2P  alarms 


■  BY  ELLEN  MESSMER 

A  dangerous  worm  called  Fiz- 
zer  that  last  week  was  discovered 
sneaking  its  way  into  U.S.  corpo¬ 
rate  networks  via  the  Kazaa  peer- 
to-peer  program  has  raised  anew 
concerns  that  such  file-sharing 
networks  are  risky  business. 

Many  organizations  have  ban¬ 
ned  peer-to-peer  applications, 
concerned  that  the  programs  will 


hog  bandwidth  or  put  companies 
at  risk  of  copyright  violations.  But 
peer-to-peer  programs  were  de¬ 
signed  to  evade  detection 
through  port-hopping  and  other 
methods,  which  means  millions 
of  employees  still  are  using  them 
on  the  sly  —  much  to  the  delight 
of  worm  and  virus  writers. 

“If  you’re  writing  computer 
viruses,  this  is  where  you  want  to 
See  Fizzer,  page  63 


Cisco  learning  to  roll  with  the  punches 


■  BY  PHIL  HOCHMUTH  AND 
JIM  DUFFY 

Seems  like  it  was  just  yesterday 
that  Cisco  CEO  John  Chambers 
was  touting  20%  to  30%  annual 
growth  for  his  company  But  the 
days  of  such  eternal  optimism 
and  bravado  are  long  gone  —  five 
years,  66  acquisitions  and  a  $400 
billion  swing  in  market  value 
gains  and  losses  will  change  your 


perspective. 

Without  a  doubt 
Cisco  has  amassed  a 
huge  following.  How¬ 
ever,  there  are  ques¬ 
tions  about  where 
the  company  goes 
from  here. 

With  routing  and  switching  mar¬ 
kets  in  its  pocket,  Cisco  will  con¬ 


Cisco? 

First  of  two  parts 


tinue  using  its  re¬ 
sources  and  massive 
installed  base  to 
move  into  new  mar¬ 
kets  as  well  as  ex¬ 
pand  its  presence  in 
storage,  security  wire¬ 
less  and  IP  telephony 
But  some  observers  say  Cisco 
really  needs  to  scramble  to  rein¬ 


vent  itself  as  the  routing  and 
switching  markets  decline. 

In  the  meantime,  the  company 
is  keeping  its  prices  relatively 
high  to  keep  up  some  sem¬ 
blance  of  the  growth  Cisco 
enjoyed  when  users  were  buy¬ 
ing  network  gear  at  a  more 
rapid  pace. 

See  Cisco,  page  12 


Cisco  CEO  John  Chambers  says  the  markets  for  voice 
over  IP,  wireless,  security  and  storage  will  double  in 
size  over  the  next  six  years  and  will  represent  a 

$35  billion  revenue  opportunity  by  2006  alone. 
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The  ROI  of 
wireless  LANs: 

Here's  a  handy  calcu¬ 
lator  that  can  help 
you  determi  e  the  costs 
and  the  benefits  of  an 
investment  in  wire  iss 
technolog 

Page  48. 
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IBM  ThinkPad  X31 


At  the  touch  of  a  button,  users  can  now  save  lost  data 
Not  to  mention  time  and  sleep. 


Everyone  makes  mistakes,  but  not  everyone  can  undo  them  Now.  thanks  to  Rapid 
Restore™  PC  software  preloaded  on  ThinkPad  notebooks,  you  can  do  just  that. 
Simply  press  F11  and  you're  able  to  launch  a  recovery  program  which  rescues 
previously  saved  versions  of  lost  data,  applications  and  operating  systems.  You’re 
back  on  track  in  no  time.  And  to  boost  confidence  further,  there's  the  outstanding 
mobile  performance  of  new  Intel  Centrino  mobile  technology  (on  select  models). 
It’s  a  foolproof  way  to  do  your  best  work.  And  put  your  best  foot  forward. 


centrino 


think  confidence 


Best  blend  of  ThinkPad  portability  and  essential  features 

IBM  ThinkPad  R40e 

Distinctive  Features: 

•  Access  IBM  —  Easy  access  to  online’  and  on-system  information 

•  IBM  Rapid  Restore  PC  —  Managed  data-recovery  solution 

System  Specifications: 

•  Inter  Mobile  Celeron® processor  1.70GHz 

•  13.3"  XGA  TFT  display 

•  Integrated  video  graphics 

•  128MB  DDR  SDRAM  std/IGB  max 

•  20GB  hard  drive' 

•  CD-ROM 

•  Microsoft®  Windows®  XP  Professional3 

•  2.5-hr  Li-Ion  battery" 

•  6.0-lb  travel  weight5 

•  1-yr  system/battery  limited  warranty6 

*949*  H  NavCode™  268422U-M516 

With  Microsoft®  Office  XP  Small  Business'  $1 ,078 

ServicePac®  Service  Upgrade: 

3-yr  onsite/9x5/ 

Next  Business  Day  Response8  (I30L9195)  $243 


Perfect  balance  of  performance  and  portability 

IBM  ThinkPad  T40 

Distinctive  Features: 

•  Hard  Disk  Drive  Shock  Absorber  —  Offers  protection 
for  the  hard  drive 

•  IBM  Embedded  Security  Subsystem  2.0  (requires 
download  of  security  software  from  IBM) 

System  Specifications: 

•  Intel®  Centrino™  mobile  technology 

-  Intel®  Pentium®  M  Processor  1 ,30GHz  supports 
Enhanced  Intel  SpeedStep®  technology9 

-  Intel®  PRO  Wireless  Network  Connection  802.11b'0 

•  14.1"  XGA  TFT  display 

•  32MB  ATI®  Mobility  Radeon™  7500  AGP4X  graphics 

•  256MB  DDR  SDRAM  std/2GB  max 

•  30GB  hard  drive 

•  Ultrabay™  Slim  CD-RW/DVD-ROM  combo 

•  Microsoft®  Windows®  XP  Professional3 

•  5.0-hr  Li-Ion  battery 

•  4.5-lb  travel  weight 

•  3-yr  system/1 -yr  battery  limited  warranty6 

*2,179  D  NavCode™  237319U-M516 

With  Microsoft®  Office  XP  Small  Business  $2,308 

ServicePac® Service  Upgrade: 

5-yr  onsite/9x5/ 

Next  Business  Day  Response  (#69P9200)  $449 


Powerful  and  competitively  priced 
desktop  replacement 

IBM  ThinkPad  G40 

Distinctive  Features: 

•  4  USB  2.0  ports  for  added  connectivity 

•  Inclined  keyboard  for  ergonomic  extended  use 

System  Specifications: 

•  Intel®  Pentium®  4  processor  2.40GHz'2 

•  14.1"  XGA  TFT  display 

•  32MB  Integrated  Intel®  Extreme  Graphics 

•  256MB  DDR  SDRAM  std/IGB  max 

•  20GB  hard  drive 

•  DVD-ROM 

•  Microsoft®  Windows®  XP  Professional 

•  2.0-hr  Li-Ion  battery 

•  7.0-lb  travel  weight 

•  1-yr  system/battery  limited  warranty6 

*1 ,349  □  NavCode™  23882MU-M516 

With  Microsoft®  Office  XP  Small  Business  $1 ,478 

ServicePac® Service  Upgrade: 

4-yr  onsite/9x5/ 

Next  Business  Day  Response  (#69P9194)  $399 


Extreme  mobility  in  a  small  and  light  ultraportable 

IBM  ThinkPad  X31 

Distinctive  Features: 

•  CompactFlash,  FireWire  and  2  USB  2.0  ports  for 
easy  connections  to  peripherals 

•  IBM  Embedded  Security  Subsystem  2.0 

System  Specifications: 

•  Intel®  Centrino™  mobile  technology 

-  Intel®  Pentium®  M  Processor  1  40GHz  supports 
Enhanced  Intel  SpeedStep®  technology9 

-  Intel®  PRO  Wireless  Network  Connection  802.11b'0 

•  12.1“  XGA  TFT  display 

•  16MB  ATI  Mobility  Radeon  7000  AGP4X  graphics 

•  256MB  DDR  SDRAM  std/IGB  max 

•  40GB  hard  drive 

•  Microsoft®  Windows®  XP  Professional 

•  5.5-hr  Li-Ion  battery 

•  3.6-lb  travel  weight 

•  3-yr  system/1 -yr  battery  limited  warranty6 
*2,229  □  NavCode™  2672CBU-M516 
With  Microsoft®  Office  XP  Small  Business  $2,358 

ServicePac®  Service  Upgrade: 

4-yr  onsite/9x5/ 

Next  Business  Day  Response  (I69P9198)  $299 


IBM  ThinkPad  Upgrades 

256MB  CL2.5  DDR  SDRAM 
SODIMM  Memory  (I10K0C 


IBM  Wireless  Networking  Options 

IBM  High  Rate  Wireless  LAN 

Mini-PCI  adapter  (#22P7701)  $109 

Cisco  Aironet  802.11b  Mini-PCI 
(wireless  upgradable 

models  only)  (#31P8301)  SI  09 

Linksys  Wireless  Dual  Band  Router 
(wireless  upgradable 

models  only)  (#22P7131)  S220 


ThinkPad  Notebook  Accessories 

Belkin  Travel  Surge  Protector 

and  retractable  phone  cord  (#22P7127)  $20 

GemPlus  GemPC400  Smart  Card 

Reader  from  IBM  (#31P8901)  $75 

Targus  DEFCON  PC  Card 

Fingerprint  Reader  (#31 P6763)  $175 

ThinkPad  Port  Replicator  II  (#74P6733)  $179 

Lexmark  X51 50  All-in-One  (#22P7149)  $160 

IBM  Portable  USB  2.0  Hard  Drive 

with  Rapid  Restore  (#09N421 1 )  $289 


Upgrade  your  system  with 
Microsoft®  Office  XP  Small  Business 
to  Microsoft®  Office  XP  Professional 
with  Publisher. 


1  866  426-6502  I  ibm.com/shop/m516 

Save  on  shipping,  order  online'.1 


IBM  recommends  Microsoft®  Windows®  XP  Professional  for  Business. 

Warranty  Information:  For  a  copy  ol  applicable  product  warranties,  write  to:  Warranty  Information,  P.0.  Box  121 95,  RTP,  NC  27709,  Attn:  Dept.  JDJA/B203.  IBM  makes  no  representation  or  warranty  regarding  third-party  products  or  services.  "Prices  do  not  include  tax  or  shipping  and  are  subject  to  change  without  notice 
Reseller  prices  may  vary  ’GB  =  1,000,000,000  bytes  when  referring  to  storage  capacity.  Accessible  capacity  is  less:  up  to  3GB  is  used  in  service  partition.  'Requires  Internet  access  account;  not  included  'Some  software  may  differ  from  its  retail  version  (if  available)  and  may  not  include  user  manuals  or  all  program 
functionality.  Software  license  agreements  may  apply  ‘These  model  numbers  achieved  eTesting  Labs,  Inc.'s  BatteryMark™  4.0.1  or  the  Ziff  Davis  Media.  Inc.'s  Business  Winstone®  2002  BatteryMark  Version  1 .0  Battery  Rundown  Time  of  at  least  the  time  shown.  This  test  was  performed  without  independent  verification  by 
the  VeriTest  testing  division  of  Lionbndge  Technologies.  Inc.  ("VeriTest")  or  Zilf  Davis  Media.  Inc.:  neither  Ziff  Davis  Media,  Inc.,  nor  VeriTest  makes  any  representations  or  warranties  as  to  these  test  results.  Winstone  is  a  registered  trademark  and  BatteryMark  is  a  trademark  ol  Ziff  Davis  Publishing  Holdings,  Inc ,  in  the 
U  S  and  other  countries.  A  description  ot  the  environment  under  which  the  test  was  pertormed  is  available  at  itm  com/pc/m/thinkpad/batteiylite  Battery  life  (and  recharge  times)  will  vary  based  on  many  factors  including  screen  brightness,  applications,  features,  power  management,  battery  conditioning  and  other  customer 
preferences  Includes  battery  and  optional  travel  bezel  instead  ol  standard  optical  drive  in  Ultrabay  bay,  if  applicable;  weight  may  vary  due  to  vendor  components,  manufacturing  process  and  options.  Thinness  may  vary  at  certain  points  on  the  system.  Telephone  support  may  be  subject  to  additional  charges.  For  onsite 
labor,  IBM  will  attempt  to  diagnose  and  resolve  the  problem  remotely  before  sending  a  technician.  'Certain  Microsoft*  software  product(s)  included  with  this  computer  may  use  technological  measures  for  copy  protection.  IN  SUCH  EVENT,  YOU  WILL  NOT  BE  ABLE  TO  USE  THE  PRODUCT  IF  YOU  DO  NOT  FULLY  COMPLY 
WITH  THE  PRODUCT  ACTIVATION  PROCEDURES.  Product  activation  procedures  and  Microsoft's  privacy  policy  will  be  detailed  during  initial  launch  ot  the  product,  or  upon  certain  reinstallations  of  the  software  product(s)  or  reconfigurations  of  the  computer  and  may  be  completed  by  Internet  or  telephone  (toll  charges  may 
apply).  These  services  are  available  tor  machines  normally  used  lor  business,  professional  or  trade  purposes,  rather  than  personal,  family  or  household  purposes.  Not  all  machine  types  and  models  are  covered  Service  period  begins  with  the  equipment  date  of  purchase.  Service  must  be  purchased  during  the  original 
limited  product  warranty  period.  Service  levels  are  response-time  objectives  and  are  not  guarantees.  A  service  technician  is  scheduled  to  arrive  at  your  location  within  two  or  lour  business  hours  or  the  next  business  day  (depending  on  service)  alter  remote  problem  determination  is  completed.  For  the  9x5x4-hour  service 
calls  dispatched  alter  1 :00  p.m.  local  time,  you  can  expect  the  service  technician  to  arrive  by  the  morning  ol  the  next  business  day.  For  noncritical  service  requests,  a  service  technician  will  arrive  by  the  end  ot  the  following  business  day  It  the  machine  problem  turns  out  to  be  a  Customer  Replaceable  Unit  (CRU),  IBM  w< 
express  ship  the  part  to  you  for  quick  replacement.  Onsite  24x7x2-hour  service  is  not  available  in  all  locations.  External  peripherals,  such  as  racks,  tape  drives  and  channel  controllers,  require  their  own,  separate  service  coverage;  they  are  not  covered  under  the  attached  Machine.  Service  activation  is  required  immediately 
following  purchase.  For  ThinkPad  notebooks  requiring  LCD  or  other  component  replacement,  IBM  may  choose  to  perform  service  at  the  depot  repair  center.  For  tailing  non-IBM  components,  customer  must  provide  replacement  pad  unless  IBM  has  a  Technical  Support  Agreement  with  the  manufacturer.  Service  does  not 
cover  accessories,  supply  items  and  certain  parts  such  as  batteries,  frames  and  covers.  V/ith  Intel  SpeedStep,  processor  speed  may  be  reduced  to  conserve  battery  power  "Based  on  IEEE  802.1 1b.  This  wireless  LAN  product  has  been  designed  to  permit  legal  operation  worldwide  in  regions  in  which  it  is  approved.  Operation 
on  channels  12-14  is  not  permitted  in  all  regulatory  regions  ol  the  world.  Consequently,  the  wireless  LAN  feature  is  limited  to  operate  on  channels  1-11  and  will  not  support  channels  12, 13  and  14.  This  product  has  been  tested  and  certified  to  be  interoperable  by  the  Wireless  Ethernet  Compatibility  Alliance  and  is  authorized 
to  carry  the  Wi-Fi  logo.  "Standard  shipping  included  when  you  order  online.  U  S.  only.  -’Power  management  features  reduce  processor  speed  when  in  battery  mode  IBM  reserves  the  right  to  alter  product  offerings  and  specifications  at  any  time,  without  notice.  IBM  is  not  responsible  lor  photographic  or  typographic  errcrs 
All  IBM  product  names  are  registered  trademarks  or  trademarks  ot  International  Business  Machines  Corporation  in  the  U.S.  and  other  countries.  Lotus  and  SmartSuite  are  registered  trademarks  of  Lotus  Development  Corporation,  an  IBM  company.  Intel,  Intel  Inside,  the  Intel  Inside  logo.  Celeron,  Centrino  and  Pentium  are 
trademarks  or  registered  trademarks  ot  Intel  Corporation  or  its  subsidiaries  in  the  U.S.  and  other  countries.  Microsoft  and  Windows  are  trademarks  or  registered  trademarks  of  Microsoft  Corporation.  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks  ot  others.  ©  2003  IBM  Corp.  Ail  rights  reserved. 


Elmer  won  second  place 
in  a  gardening  contest. 

He  got  a  bag  of  seeds  and  a 
backyard  full  of  plastic  flamingos. 
You’re  flying  high  now  Elmer. 


Nothing  beats  number  one. 


RETINA®  The  #1  Rated  Network  Security  Scanner 

Superior  Vulnerability  Assessment  &  Remediation 

Would  you  trust  the  security  of  your  network  to  anyone  but  the  industry  leader?  Introducing 
Retina,  the  industry's  #1  rated  vulnerability  assessment  solution  from  eEye  Digital  Security. 
Retina  uses  non-intrusive  tests  to  assess  your  network,  accurately  identify  weakness  and 
provide  comprehensive  detail  to  enable  complete  remediation.  Take  control  of  your  network  and 
let  Retina  simplify  your  risk-reduction  process.  Because  nothing  beats  number  one. 

FREE  RETINA  Trial  Version  and  Whitepaper:  www.eeye.com/free 
or  Call  1.866.282.8276  For  More  Information 


eEZye  Digital  Security 


Vulnerability  is  over. 
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PDA  includes  integrated 
802.11b  WLAN  connectivity. 
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Wireless  LAN  switches 

WLAN  switch  vendors  have  created  a  huge 
buzz  around  technology  that's  designed  to 
help  network  exec¬ 
utives  scale  their 
WLANs.  In  this 
special  report,  we  tell 
you  who  the  players  are 
and  how  their  products  differ.  Page  43. 


The  ROI  of  WLANs:  Here’s  a  handy  calculator  that  can 
help  you  determine  the  costs  and  benefits  of  an  investment  ir 
wireless  technology.  Page  48. 


Symbol  was  the  first 
vendor  to  ship  WLAN 
switches. 
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The  SCO  lawsuit  and  you 

Now  the  SCO  Group  is  warning  that  even  end  users  could  face  penalties 
for  using  what  it  considers  purloined  code  in  Linux.  Your  thoughts. 

DocFinder:  5947 

Personal  firewalls  for  dial-up  users 

Help  a  reader  who's  rolling  out  a  global  Internet  access  dialer  and 
wants  opinions  on  the  need  for  personal  firewalls  related  to  dial-up 
access, 

DocFinder:  5948 

Wireless  switching  research  center 

Our  newest  research  center  helps  you  stay  on  top  of  the  latest 
wireless  switch  news,  research,  opinion  and  more. 

DocFinder:  5949 

Cisco’s  new  security  plans 

Senior  Editor  Ellen  Messmer  discusses  what  Cisco  will  do  with  its  recent 
acquisition  of  Okena  and  its  "behavior-blocking"  intrusion-detection  and 
security  software. 

DocFinder:  5950 
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Ethernet  blast 

■  The  top  speed  of  Ethernet  could  hit  40G  bit/sec  within  the  next 
two  years,  a  senior  Cisco  executive  said  last  week.  Developing  40G 
Ethernet  would  pose  less-steep  technical  challenges  than  creating 
a  100G  Ethernet  technology  which  would  be  the  next  mathemati¬ 
cal  step,  according  to  Luca  Cafiero,  senior  vice  president  and  gen¬ 
eral  manager  of  switching,  voice  and  storage  at  Cisco.  In  fact,  40G 
Ethernet  should  be  technically  feasible  within  two  years,  he  told 
reporters  and  analysts  at  an  educational  briefing  on  switching  at 
Cisco  s  headquarters  in  San  Jose.  Cafiero,  an  Ethernet  pioneer  who 
co-founded  seminal  LAN  switch  vendor  Crescendo  Communi¬ 
cations,  said  he  believes  the  Catalyst  6500  platform’s  per-module 
capacity  of  40G  bit/sec  could  be  doubled,  but  the  timing  of  that 


■  'hi  Good  heBad  teUgly 


A  fate  worse  than  ATM 

fees?  Bank  of  America  customers  have 
been  targeted  by  scam  artists  who  are 
e-mailing  bank  clients  in  hopes  of  getting 
them  to  log  on  to  a  fake  Web  site  which 
then  captures  their  personal  financial 
details.  The  bank  issued  a  warning 
to  customers  to  be  aware  of  the 
scam,  which  is  similar  to  scams  pulled 
recently  in  Australia. 


Happy  birthday,  Ethernet 

Ethernet,  unlike  so  many  of  us,  actually 
does  seem  to  get  better  with  age,  what 
with  Gigabit  Ethernet  and  even  10G  Ethernet 
now  on  the  scene.  The  technology's  creator, 
Bob  Metcalfe,  is  readying  for  a  May  22 
celebration  of  Ethernet’s  30th  birthday  at 
the  Palo  Alto  Research  Center,  a  Xerox 
subsidiary  better  known  as  PARC.  > 


Down  the  toilet.  An  item  that  appeared  in  this  space  last  week  — 
as  well  as  in  many  other  media  outlets  in  recent  weeks  —  highlighted  a  new 
Internet-enabled  toilet  supposedly  in  the  works  at  Microsoft’s  MSN  UK.  Early  last 
week,  though,  Microsoft  said  the  “iLoo"  was  nothing  but  a  prank.  Later  in  the 
week,  the  company  said  the  iLoo  had  in  fact  been  on  the  drawing  board,  but  was 
killed.  Who  would  have  thought  you  couldn’t  believe  Microsoft? 


speed  boost  will  be  determined  by  customer  demand. 


Dollars  to  doughnuts 

■  Imagine  waving  your  mobile  phone  at  a  filling  pump  to  pay  for  gas  or  tapping  it  on  some 
tiny  gadget  to  buy  a  bag  of  doughnuts. That’s  the  vision  of  Nokia  and  MasterCard,  which 
have  teamed  to  test  technology  they  hope  will  someday  give  mobile  phones  new  wireless 
credit  card  capabilities.  In  a  market  trial  to  begin  later  this  month  in  Irving, Texas,  Nokia  will 
distribute  phones  with  snap-on  covers  that  have  an  embedded  Radio  Frequency  ID  chip. 
The  chip  is  programmed  with  preregistered  MasterCard  payment  account  information, 
using  the  company’s  “Pay Pass"  technology.  Consumers,  for  instance,  can  tap  or  wave  their 
Nokia  phones  equipped  with  the  vendor’s  SmartCover  technology  on  or  at  any  specially 
equipped  PayPass  readers  at  point  of  sale,  according  to  Nokia.The  chip  then  transmits  pay¬ 
ment  account  information  to  the  terminal,  which  is  connected  to  the  MasterCard  payment 
network.  A  system  provided  by  JP  Morgan  Chase  &  Co.  processes  the  payment  account 
information.The  process  should  take  only  several  seconds. 

Some  days  it  doesn't  pay  to  get  out  of  bed 

■  Last  week  wasn’t  a  good  one  for  telecom  provider  Allegiance  Telecom.  First,  the  com¬ 
pany  filed  for  bankruptcy  in  the  U.S.  Bankruptcy  Court  for  the  Southern  District  of  New  York 
after  failing  to  cut  its  $1.2  billion  debt  load  by  half  as  promised  by  the  end  of  April. Then 
the  Dallas  company  said  its  losses  grew  in  its  most  recent  quarter,  reporting  a  net  loss  of 
$120.1  million  compared  with  a  loss  of  $1 12.6  million  a  year  earlier. The  final  insult  came 
as  construction  workers  in  Boston  cut  through  four  Allegiance  OC-48  links,  sending  tele¬ 
phone  and  Web  traffic  from  hundreds  of  businesses  into  the  abyss. 

IBM  decides  to  Think 

■  IBM  last  week  announced  it  had  closed  a  deal  to  acquire  Think  Dynamics,  a  Toronto 
maker  of  automated  server  provisioning  software. Think  Dynamics’ technology  and  staff 

COMPENDIUM 

Going  over  to  the  Borg 

Robert  Scoble  recently  started  working  for  Microsoft  He  writes  that  the  new-employee 
orientation  was  not  what  you’d  think:  “No,  I  didn’t  get  implants,  but  I  got  a  blue  badge. 
Where's  the  Kool-Aid?  Ths  red  pills?  The  Darth  Vader  breathing  apparatus?" 

Read  more  at  u'wu'.nu'fusion.com,  DocFinder:  5941. 


immediately  will  be  integrated  into  Big  Blue’s  management  software  division  Tivoli,  with 
those  employees  moving  to  IBM’s  labs  inToronto.The  financial  details  were  not  disclosed. 
Tivoli  General  Manager  Robert  LeBIanc  said  Think  Dynamics  technology  will  add  auto¬ 
mated  provisioning  to  IBM’s  eServer,eSourcing  and  On-Demand  initiatives.Think  Dynam- 
ics’Think  Control  Suite  lets  users  pool  server  resources  and  uses  policies  to  automate  pro¬ 
visioning  of  those  resources.  IBM  will  continue  to  sell  Think  Dynamics’  products  individu¬ 
ally  and  will  integrate  the  technology  across  its  software,  hardware  and  services  divisions. 

Spammers  to  get  to  know  RICO 

■  The  U.S.  Congress  ratcheted  up  the  rhetoric  on  spam  last  week  when  Sen.  Bill  Nelson 
(D-Fla.)  introduced  a  bill  that  would  let  federal  authorities  charge  spammers  with  racke¬ 
teering  crimes.  The  bill  is  the  third  introduced  in  Congress  this  year  focusing  on  spam. 
Nelson’s  bill  would  allow  criminal  charges  under  the  Federal  Racketeer  Influenced  and 
Corrupt  Organizations  Act,  originally  used  to  prosecute  organized  crime.  RICO  lets  author¬ 
ities  seize  the  assets  of  businesses  engaged  in  racketeering,  the  practice  of  using  an  orga¬ 
nization  to  obtain  money  illegally  or  intimidate  people.lt  also  lets  racketeering  victims  file 
civil  lawsuits  against  the  perpetrators. The  charges  would  be  applied  to  unsolicited  bulk 
commercial  e-mail  that  uses  false  routing  information  or  forged  return  addresses,  as  well 
as  spam  sent  to  someone  who  asked  to  opt  out.  Underscoring  the  government’s  efforts, 
federal  and  state  authorities  filed  45  criminal  and  civil  actions  against  Internet  scam  artists 
and  bulk  e-mailers  last  week,  the  Federal  Trade  Commission  says.The  FTC  also  says  it  will 
work  with  21  U.S.  and  international  agencies  to  close  down  “open  relays” —  unsecured 
e-mail  servers  that  spammers  use  to  conceal  their  identities. 

Wireless  standards  groups  marry 

■  Two  groups  that  have  worked  together  on  developing  wireless  security  standards  have 
decided  to  formally  join  forces.  By  mid-June,  the  PAM  Forum,  a  consortium  working  on 
presence  and  availability  security  standards  within  the  wireless  industry,  will  become  part 
of  the  Parlay  Group, a  multivendor  industry  consortium  encouraging  common  standards 
across  wireless  and  other  networks.The  PAM  Forum.created  in  early  2000,  will  become  the 
presence  and  availability  management  working  group  within  the  Parlay  Group,  which  has 
wireless  vendors  and  operators  as  its  membership  base.  Members  include  Ericsson,  HP 
Lucent  and  NTT  DoCoMo.  Presence  and  availability  standards  focus  on  security  and  pri¬ 
vacy  on  wireless  devices,  including  issues  such  as  keeping  unauthorized  users  off  wireless 
networks.The  PAM  Forum  has  worked  on  a  specification  consisting  of  APIs  designed  to  let 
wireless  networks  securely  share  information. 


ARE  THE  SEVEN  DEADLY  INTERNET  SINS 
IMPACTING  YOUR  INFORMATION  SYSTEMS? 

(Stop  backing  too  h  from 
threatening  network  security. 

m  m 

Evil  lurks  all  over  the  Internet.  Keep  your  company’s 
network  secure  with  Websense  Enterprise  software. 

Root  out  hacking  tools  from  your  systems.  Block  access 
to  sites  that  promote  hacking  or  contain  malicious 
mobile  code.  And  beef  up  network  security  by 
proactively  preventing  the  launch  of  hacking  programs 
from  the  desktop.  With  its  efficient  installation  and 
seamless  integration  with  the  leading  firewalls,  proxy 
servers,  routers,  network  switches  and  caching 
appliances,  Websense  Enterprise  makes  protecting  your 
network  easier  than  ever.  So  why  not  turn  to  the 
leader  in  employee  Internet  management  to  bring  your 
company’s  anger  management  issues  under  control. 
Visit  www.websense.com  today  for  more 
information  or  to  download  a  free,  30-day  trial 
of  Websense  Enterprise. 
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Desktop  blade  PCs  on  tap  from  HP 


Digital  desktops 


HP  is  looking  to  simplify  desktop  management  by  introducing  a  blade  PC  product  that  moves 
desktop  intelligence  to  a  centrally  located  rack  server.  ClearCube  and  Avocent  offer  similiar 
technology.  Here’s  how  the  ClearCube  product  works: 

©  ©  PC  blade 


Screen/  Mouse 
keyboard 


ClearCube 
Blade  Cage 


O  A  client  device  called  a  C/Port  (Command  Port), 
about  the  size  of  a  VHS  tape  with  no  fans  or  moving 
parts,  sits  at  the  user’s  desktop  and  provides  the 
connections  and  functions  needed  for  the  PC. 
Peripherals  such  as  the  keyboard  and  mouse  hook 
into  this  device,  which  also  has  USB  connections. 


©  The  C/Port  connects  via 
Category  5  cable  to  a 
dedicated  ClearCube 
blade  chassis,  which 
supports  the  company’s 
Wintel  PC  blades. 


©The  blades  support 
network  connectivity, 
applications  and 
storage. 


IT  administrator 


©  Management  software 
administrators 
manage  the  PC  blades 
from  any  location. 


■  BY  JENNIFER  MEARS 

HP  is  designing  a  thin-client-like 
blade  PC  that  sources  say  will 
centralize  the  task  of  managing 
individual  desktops  by  moving 
their  intelligence  to  data  centers, 
where  access  and  security  can  be 
controlled  more  easily 

With  blade  PCs,  employees  have 
a  monitor,  keyboard  and  mouse 
on  their  desks,  along  with  a  client 
appliance  linked  to  centrally 
located  blade  servers  packed  into 
a  data  center  chassis.  Spare 
blades  could  be  configured  to 
provide  hot  backup  in  case  of  a 
failure.  The  idea  is  that  IT  more 
easily  could  control  access  to  re¬ 
sources  in  centrally  located  racks 
of  servers  than  in  widely  dis¬ 
persed  PCs. 

“Today’s  economic  climate  and 
the  way  customers  are  thinking 
about  better  management,  better 
utilization  of  resources,  has  also 
become  a  desktop  issue  for  some 
customers,”  says  Hugh  Jenkins, 
vice  president  of  marketing  for 


the  Industry  Standard  Server 
group  at  HP 

HP  said  it  was  working  on  a 
blade  client  but  declined  to  give 
other  details.  The  company  has  a 
slew  of  PC-related  announce¬ 


ments  slated  for  this  week,  “but 
they’re  not  blade-related  in  any 
form  or  fashion,”  a  spokeswoman 
says.  HP  also  would  not  disclose 
technical  details  about  what  it  is 
working  on,  except  to  say  that  it  is 


“engaging  with  select  customers” 
to  address  issues  such  as  distance 
limitations  between  desktop  and 
servers  that  might  be  curtailing 
widespread  adoption  of  similar 
products  from  other  vendors. 

Start-up  ClearCube,  for  example, 
can  send  signals  over  Category  5 
Ethernet  from  the  blade  to  its 
C/Port  client  device  up  to  660  feet 
away.  Raj  Shah,  chief  marketing 
officer  at  ClearCube,  says  the 
company  is  working  on  fiber 
technology  that  will  extend  that 
distance  by  at  least  3,200  feet. 

Analysts  say  HP  likely  is  using 
some  type  of  hybrid  thin-client 
approach  that  would  lift  distance 
limitations  but  still  give  users  ac¬ 
cess  to  a  dedicated  blade.  In  true 
thin-client  systems,  users  share 
system  resources. 

“The  advantage  of  [the  hybrid 
thin-client]  approach  is  that  you 
can  switch  it,  which  means  you 
can  pump  [the  bits]  across  a  net¬ 
work.  As  long  as  you’ve  got  a  net¬ 
work, you  can  install  this  solution. 
It  doesn’t  really  matter  where  the 
blades  are  or  where  the  desktop 
is.  It  will  go  over  the  Ethernet,” says 
Rob  Enderle,  research  fellow  at 
Forrester  Research. 

With  the  other  products,  “there 
has  to  be  a  direct  cable  connec¬ 
tion  from  the  blade  to  the  desk¬ 
top.  You  can’t  switch  it,  because 
basically  the  wire  has  got  to  be 
continuous  because  it  just  ex¬ 
tends  the  ports,”  he  says. 

Keyboard,  video,  mouse  switch 
maker  Avocent  Technologies  in¬ 
troduced  its  digital  desktop  last 
summer  after  acquiring  digital  ex¬ 
tension  technology  from  2C  Com¬ 
puting.  Its  product,  which  places  a 
Cstation  client  device  on  a  user’s 


desktop,  can  send  PCI  bus  signals 
from  a  remote  PC  up  to  about 
2,600  feet  away  over  multimode 
fiber  and  up  to  about  660  feet 
away  over  copper  lines. 

Avocent  and  ClearCube  execu¬ 
tives  say  they  have  talked  with  sys¬ 
tems  vendors  such  as  Dell,  HP 
and  IBM  about  using  their  tech¬ 
nology  to  create  blade  PCs. 

HP  would  be  the  first  Tier  1  sys¬ 
tems  vendor  to  introduce  a  blade 
PC,  which  might  help  give  the 
market  a  kick, analysts  say.  IBM, on 
the  other  hand,  says  it  has  no 
plans  to  introduce  blade  archi¬ 
tecture  into  its  PC  products.  “Our 
customers  aren’t  calling  for  it,”  an 
IBM  spokesman  says. 

Not  that  interest  in  the  devices 
isn’t  out  there. 

“The  concept  of  PC  blades  is 
gaining  more  currency  because 
of  the  availability  and  security 
aspects  of  it  post-9/ 1 1,”  says  Roger 
Kay,  director  of  client  computing 
at  IDC.  “There  are  some  cost  rea¬ 
sons  that  favor  it,  as  well,  particu¬ 
larly  support  costs,  because  the 
real  smarts  of  your  system  are  sit¬ 
ting  in  one  place,  which  happens 
to  be  where  your  IT  people  are.” 

The  idea  is  attractive  to  the 
financial  industry  and  educa¬ 
tional  institutions,  where  multi¬ 
ple  desktops  might  be  packed 
into  small  areas,  analysts  say.  Call 
centers  and  other  applications 
that  require  high  availability  also 
could  benefit  from  the  blade 
architecture,  and  factories  could 
use  it  to  get  critical  computer 
systems  out  of  dirty  work  envi¬ 
ronments. 

ClearCube,  which  has  had  a 
blade  PC  product  for  more  than 
four  years, says  it  is  seeing  increas¬ 
ing  interest  and  has  more  than 
400  customers,  including  Morgan 
Stanley  and  British  Petroleum. 
The  ability  to  centrally  locate  PCs 
—  eliminating  clutter  on  desk¬ 
tops,  streamlining  IT  manage¬ 
ment  and  protecting  those  assets 
from  theft  or  damage  —  is  gain¬ 
ing  attention. 

Wayne  Rhinehart,  project  man¬ 
ager  at  International  Paper  in 
Memphis,  Tenn.,  uses  Avocent 
technology  to  centrally  locate 
Dell  servers  for  his  test  lab. 

“Our  LAN  group  can  manage 
the  servers  from  a  central  loca¬ 
tion  vs.  trying  to  get  under  every¬ 
body’s  desk,”  he  says.  “It  reduces 
the  time  that  the  guys  are  trying  to 
figure  out  locations  of  machines. 
Probably  just  the  time-savings  for 
technicians  is  where  we  get  the 
most  bang  for  our  buck."* 


Extreme  drives  Gigabit  to  the 
desktop  with  Alpine  module 


■  BY  PHIL  HOCHMUTH 

Extreme  Networks  is  looking  to  spur  corpo¬ 
rate  interest  in  Gigabit  to  the  desktop  with  new 
high-density  modules  announced  this  week 
for  its  Ethernet  switch. 

The  new  blades  could  help  companies  with  band¬ 
width-intensive  applications  push  more  Gigabit 
Ethernet  to  desktops.  Alpine  chassis  loaded  with  the 
new  modules  also  could  be  used  to  connect  clusters 
of  Gigabit-enabled  servers. 

The  two  blades  include  a  16-port  mini-Gigabit  In¬ 
terface  Converter  module  (the  MG-16X3),and  cop¬ 
per-based  10/100/1000M  bit/sec  module  (GM-16T3). 
Both  products  are  based  on  Extreme’s  Triumph  ASIC 
architecture,  announced  last  month,  which  provides 
greater  port  densities  and  new  features  over  the 
company’s  old  technology,  Extreme  says. 

Modules  based  on  the  Triumph  architecture  were 
announced  last  month  for  Extreme’s  BlackDiamond 
core  switch. 

Among  several  new  features  in  the  the  Triumph 
architecture  is  the  ability  to  run  diagnostics  on  Cate¬ 
gory  5/6  cable  connections  attached  to  each  port  on 
a  Triumph-based  blade,  Extreme  says.  The  hard¬ 
coded  diagnostic  tools  can  detect  the  length  of  an 
attached  network  cable  and  locate  faults  in  the  fiber 
or  copper  cable.  Improperly  terminated  cables  or 
misconfigured  connections  also  can  be  detected  on 
each  port.The  Triumph-based  modules  also  support 
rate  shaping,  letting  bandwidth  on  individual  ports 
be  "throttled"  from  1M  to  1G  bit/sec,  based  on  net¬ 
work  rules  and  management  criteria. 


A  new  16-port  10/100/1000  blade  for  the  Alpine  could  help 
bring  Gigabit  Ethernet  to  the  desktop. 


Originally  introduced  as  its  platform  for  Ethernet 
metropolitan-area  networks,  Alpine  also  is  being 
used  by  customers  as  a  chassis  for  wiring  closet 
switches,  typically  connecting  to  an  Extreme  Black- 
Diamond  box  in  the  core. 

The  box  competes  with  Cisco’s  Catalyst  4000  and 
6500  series  and  Foundry  Networks’  midsize  Fastlron 
Edge  switch  chassis. 

Four  Alpine  chassis  will  be  deployed  this  month 
in  wiring  closets  at  the  Arizona  State  Department  of 
Land  Management.  The  switches  will  include  GM- 
16T3  blades  to  support  bandwidth-intensive  appli¬ 
cations,  such  as  geographical  information  system, 
detailed  mapping  and  satellite  imaging  tools.  The 
switches  will  provide  Gigabit  Ethernet  connections 
to  160  workers  who  use  Gigabit  Ethernet-enabled 
Dell  workstations  to  create  detailed  images  and 
records  for  the  9.3  million  acres  of  land  the  depart¬ 
ment  controls,  says  William  Reed,  CTO  for  the 
department. 

“You  don’t  want  to  put  Gigabit  Ethernet  on  desk¬ 
tops  if  you’re  only  doing  word  processing,” Reed  says. 
“You  really  have  to  come  up  with  the  justification  for 
it.You  have  to  be  doing  something  that  fills  that  pipe 
and  have  PCs  capable  of  handling  that  kind  of  data. 
And  we’ve  got  that.” 

The  GM-16X3  costs  $6000  and  the  GM-16T3  is 
priced  at  $4,500.  ■ 


Introducing  the  AMD  Opteron"  processor,  64-bit  computing  for  today’s  32-bit  world. 

It’s  the  only  processor  that  is  designed  to  run  your  32-  and  64-bit  applications  simultaneously  and  without  compromise. 
AMD  Opteron  runs  on  AMD64-a  breakthrough  architecture  that  enables  64-bit  technology  on  the  x86  platform- 
creating  a  new  class  of  computing  so  you  can  migrate  to  64-bit  technology  on  your  own  terms. 


The  world’s  highest  performing  2P  and  4P  servers  are  now  powered 
by  AMD  Opteron  processors.  Receive  the  performance  and  security  benefits  of 
64-bit  computing,  while  getting  the  best  32-bit  performance  available  anywhere. 


AMD£1  y 

Opteron 


Leverage  your  existing  investments  while  preparing  for  the  future.  One  architecture 
across  one  enterprise  means  you  won’t  have  to  rip  and  replace  your  entire  infrastructure  when  you  transition 
to  64-bit  computing.  It’s  just  another  way  AMD  designs  and  builds  processors  with  you  in  mind.  For  a  closer 
look  at  the  financial  and  performance  advantages  of  the  AMD  Opteron  processor,  visit  www.amd.com/opteron 
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Verizon  recasts  DSL 

Wi-Fi  access,  price  cuts  and  speed  increase  intended  to  spur  demand,  stave  off  competitors. 


■  BY  JIM  DUFFY 

NEWYORK  — Verizon  last  week 
revamped  its  DSL  services  in  an 
attempt  to  spur  demand  and 
increase  its  share  of  the  broad¬ 
band  market. 

Verizon  plans  to  extend  broad¬ 
band  capacity  to  80%  of  its  57.5 
million  access  lines  by  year-end, 
and  its  new  DSL  packaging  and 
pricing  is  intended  to  drive  that, 
company  executives  say. 

Among  the  regional  Bell  operat¬ 
ing  companies,  Verizon,  with  1 .8 
million  lines,  is  the  No.  2  provider 
of  DSL,  behind  SBC,  which  has  2.2 
million  lines  in  service. 

Increased  penetration  should 
help  Verizon  achieve  profitabil¬ 
ity  from  its  DSL  service  faster, 
they  add. 

A  profitable  service  means 
more  money  to  roll  out  more  ser¬ 
vices  for  business  users,  which 
translates  into  customer  loyalty 
according  to  analysts. 

“We  expect  the  lower  price  to 
reduce  churn  in  the  DSL  base,  a 
prime  contributor  to  lower  mar¬ 
gins  in  DSL, "John  Hodulik  of  UBS 
Warburg  said  in  a  bulletin  issued 
last  week.  “Longer  term,  this  offer 
is  clearly  focused  on  the  large 
cable  [operators]  in  an  effort  to 
take  back  market  share  in  high¬ 
speed  data  and  head  off  compe¬ 
tition  from  cable  telephony  down 
the  road.” 

Verizon  is  rolling  out  Wi-Fi- 
based  wireless  broadband  Inter¬ 
net  access  for  1,000  pay  phones 
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■  THIS  WEEK'S  QUESTION: 

Which  U.S.  President 
created  the  National 
Security  Telecommuni¬ 
cations  Advisory 
Committee,  a  group  of 
up  to  30  leading  tech¬ 
nology  industry  chief 
executives? 

Answer  tins  and  nine  additional  questions 
online  and  you  could  wm  S500I  Visit 

Network  World  fusion  and  enter  2349 
iitheSpchJox. 

www.nwfusion.com 


in  New  York  City.  This  will  let 
Verizon’s  Online  DSL  customers 
who  have  laptops,  PDAs  or  Pocket 
PCs  gain  free  wireless  Internet 
access  if  they  are  within  300  feet 
of  a  Wi-fi-enabled  pay  phone  — 
or  hot  spot. 

Verizon  already  has  150  such 
hot  spots.Three  hundred  and  fifty 
will  be  turned  on  this  summer, 
and  1,000  by  year-end,  Verizon 
officials  say 

Verizon  decreased  the  monthly 
entry  fee  from  $49.95  to  $34.95  for 
consumers  (www.nwfusion.com, 
Docfinder:  5939),  and  by  $10  to 
$59.95  and  $89.95  for  small  busi¬ 
nesses,  depending  on  the  type  of 
DSL  service  they  buy  Verizon  also 
has  upped  the  downstream  speed 
from  768K  to  1 .5M  bit/sec. 

Verizon  Freedom  for  Business 
packages  now  offer  a  20%  dis¬ 
count  on  the  monthly  recurring 
charge  for  any  business  DSL 
package,  the  carrier  says. 
Residential  users  who  purchase 


DSL  derby 

Number  of  DSL  lines  in 
service  at  the  four  RBOCs: 


SBC: 

2.2  million 

Verizon: 

1.8  million 

BellSouth: 

1.1  million 

Qwest: 

500,000 

DSL  as  part  of  Verizon’s  Freedom 
local/long-distance  bundled  ser¬ 
vice  will  get  it  for  $29.95  per 
month  instead  of  $34.95,  the  car¬ 
rier  says. The  new  lower  rates  will 
become  effective  for  existing 
Verizon  Online  DSL  customers 
May  21.  Customers  will  see  the 
new  prices  on  their  June  and  July 
bills, Verizon  says. 

The  RBOC  also  has  bundled  the 
recast  DSL  service  with  Micro¬ 
soft’s  MSN  8.0  software,  which 
includes  shared  browsing  tech¬ 


nology,  advanced  parental  con¬ 
trols,  e-mail  vims  protection  and 
spam  filters,  research  and  learn¬ 
ing  tools  from  MSN  Encarta  Plus, 
financial  management  software, 
and  photo  editing. 

The  new  service  will  soon  fea¬ 
ture  Verizon’s  Digital  Companion 
service  that  is  currently  in  devel¬ 
opment.  Digital  Companion  will 
let  customers  integrate  calen¬ 
dars,  address  books  and  to-do 
lists  with  caller  ID  tracking,  call 
dialing  and  call  forwarding,  the 
carrier  says. 

Verizon  and  Microsoft  entered 
into  a  broadband  content  deliv¬ 
ery  relationship  last  June.  SBC 
has  a  similar  relationship  with 
Yahoo,  and  the  two  unveiled 
their  service  last  September 
(Docfinder:  5940). 

New  customers  will  receive 
MSN  8.0  with  their  Verizon 
Online  DSL  installation  CD,  and 
existing  customers  can  order  the 
CD  for  free.  ■ 


Netegrity  adds  provisioning 
to  user  management  package 


■  BY  JOHN  FONTANA 

Netegrity  next  month  is  scheduled  to  integrate  pro¬ 
visioning  technology  into  its  user  management  soft¬ 
ware  to  help  corporations  better  manage  identities 
across  their  networks  and  secure  their  resources. 

The  company  is  releasing  IdentityMinder  5.6, 
which  adds  provisioning  technology  it  licensed 
from  Business  Layers.  Provisioning  lets  companies 
automatically  set  up  and  deactivate  user  accounts 
across  systems.  Provisioning  is  being  combined 
into  a  single  user  interface  with  IdentityMinder’s 
capabilities,  including  role-based  access  control, 
process  workflow,  delegated  user  administration 
and  employee  self-service  features  such  as  pass¬ 
word  reset. 

Netegrity  is  attempting  to  round  out  its  software  to 
stay  in  line  with  a  trend  known  broadly  as  identity 
management,  which  can  include  access-control 
products,  directories,  provisioning,  password  admin¬ 
istration  and  single  sign-on. 

The  company  is  in  somewhat  of  a  catch-up  mode 
to  competitors  such  as  Courion,  IBM,  Oblix  and 
Waveset  Technologies. 

Corporations  are  looking  at  identity  management 
to  better  control  who  is  on  their  networks,  and  what 
they  are  authorized  to  do,  and  to  lower  the  cost  of 
user  administration. 

“There  are  a  lot  of  reasons  to  do  a  better  job  of 
automatically  establishing  user  identities,  including 
some  current  legislation,”  says  Phil  Schacter.an  ana¬ 
lyst  with  Burton  Group.  He  cites  regulations  such  as 


the  Sarbanes-Oxley  Act  and  the  Health  Insurance 
Portability  and  Accountability  Act. 

Schacter  says  companies  realize  that  past  tools 
and  operational  procedures  for  user  management 
have  not  been  adequate  given  the  increase  in  the 
number  of  internal  and  external  users  demanding 
access  to  corporate  systems. 

In  that  scenario,  managing  user-account  informa¬ 
tion  in  multiple  locations  becomes  a  security  and 
administrative  quagmire. 

In  addition  to  adding  provisioning  to  help  address 
the  problem,  Netegrity  has  added  to  IdentityMinder 
auditing  and  reporting  capabilities, and  the  ability  to 
create  custom  workflows  for  approvals  and  notifica¬ 
tions.  IdentityMinder,  which  is  a  Java  2  Platform 
Enterprise  Edition  application,  also  supports  Web 
applications  servers,  including  BEA  Systems  Web- 
Logic,  IBM  WebSphere  and  JBoss. 

“The  most  challenging  part  of  any  identity  man¬ 
agement  system  is  to  understand  the  business  pro-  ! 
cess  around  user  management,”  says  Amit  Jasuja, 
vice  president  of  product  management  for  Netegrity. 
“Who  are  your  administrators,  business  users,  man¬ 
agers,  and  what  approval  rights  do  they  have  [to  cre¬ 
ate  accounts]?  What  is  the  workflow  process  and  the 
back-end  systems  to  integrate  with?” 

IdentityMinder  5.6  has  two  editions.  The  Web  edi¬ 
tion  does  not  include  the  provisioning  software,  [ 
while  Provisioning  edition  includes  the  provisioning 
engine  and  a  set  of  more  than  30  connectors.  The 
Provisioning  edition  costs  $70  per  user  and  is  ex-  i 
pected  to  ship  by  the  end  of  June.  ■ 
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I  can't  pull  all-nighters  every  night. 


Thing  is,  our  backup  and  recovery  system  has  to. 


It  can't  rest. 


Not  even  for  a  second. 


Not  if  I  hope  to  get  some  myself. 


Make  sure  your  data's  always  safe  and  you'll  save  yourself  a  lot  of  worry.  And  work.  One  way  is  with  EchoView™.  A  potent,  new  data- 


EchoView"* 


protection  appliance  that  continually  captures  and  journals  data  as  soon  as  it's  written,  for  nonstop  protection.  And  EchoView™  provides 
rapid  recovery  to  any  point  in  time,  to  keep  business  humming.  So  while  your  systems  may  be  disrupted,  your  nights  won't  be. 
Learn  all  the  ways  we  can  help  you  at  www.savetheday.com.  ^3  StoraceTek  Save  the  Day.’* 
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Cisco 

continued  from  page  1 

Stale  bread  and  butter? 

Switching  and  routing  make  up 
two-thirds  of  the  company’s  sales, 
Cisco  reported  recently.  But  these 
core  businesses  are  on  an  overall 
downslide  —  worldwide  router 
and  switch  sales  shrank  15%  and 
6%,  respectively,  the  last  two 
years,  Dell’Oro  Group  says  —  and 
the  technology  is  becoming 
increasingly  commoditized  by 
new  low-end  competitors.  Be¬ 
cause  of  these  factors,  there 
could  be  much  for  Cisco  to  worry 
about,  as  some  customers  might 
become  less  willing  to  spend 
more  on  commodity  gear, 
observers  say 

With  the  LAN  and  WAN  mar¬ 
kets  wrapped  up  —  Cisco  has  an 
almost  70%  market  share  in  both 
areas  —  the  company  is  looking 
for  new  markets  to  conquer,  with 
voice  over  IP  (VoIP),  wireless, 
security  and  storage  being  on 
the  short  list.  Chambers  says 
each  of  these  markets  will  dou¬ 
ble  in  size  over  the  next  five  to 
six  years  and  will  represent  a  $35 
billion  opportunity  overall  in 
worldwide  revenue  by  2006. 

Cisco  has  seen  early  success  in 
the  VoIR  security  and  wireless 


markets.  Its  Architecture  for  Voice, 
Video  and  Integrated  Data 
(AWID)  products,  while  criti¬ 
cized  early  on  for  lack  of  features 
and  poor  reliability,  has  won  over 
many  customers.  Cisco’s  AWID 
products  represented  more  than 
50%  of  the  market  for  IP  phones 
and  PBX  revenue  in  the  fourth 
quarter  of  2002,  according  to 
Synergy  Research. 

“I  was  a  little  skeptical  when 
Cisco  started  to  market  itself  as  a 
phone  companyf  says  Phil  Go, 
CIO  of  Barton  Marlow,  a  Chicago 
construction  company  that  re¬ 
cently  installed  the  AWID  prod¬ 
ucts.  “1  said,  why  is  Cisco  doing 
this,  but  the  more  you  think 
about  it,  the  more  it  makes 
sense,”  because  the  industry  is 
moving  to  converge  data,  voice 
and  video  to  IP 

Cisco’s  security  and  wireless 
products  also  have  climbed  to 
the  top  of  their  respective  mar- 
kets.The  company  had  38%  share 
in  VPN/firewall  appliances  and 
41%  share  in  network  intrusion- 
detection  gear  —  tops  in  both 
arenas  last  year, according  to  IDC. 
And  since  entering  the  wireless 
LAN  (WLAN)  arena  in  1999  with 
the  acquisition  of  Aironet,  Cisco 
garnered  34%  of  the  market  for 
enterprise  WLAN  network  inter¬ 


face  cards  and  access  points  (in 
the  third  quarter  of  2002,  accord¬ 
ing  to  Synergy). 

Cisco’s  most  recent,  and  most 
attention-grabbing,  push  came 
with  a  storage-area  network 
(SAN)  product  debut,  with  the 
MDS  9000  Fibre  Channel  plat¬ 
form.  While  WLAN,  VoIP  and 
security  all  are  intertwined  in 
some  way  with  core  IP  back¬ 
ground,  the  storage  market  rep¬ 
resents  uncharted  waters  for  the 
network  giant. 

“Our  interactions  with  Cisco 
have  been  around  routers, 
switches  and  IP  phones,” says  Jon 
Beyman,  CIO  of  Lehman  Brot¬ 
hers,  the  New  York  brokerage 
firm.”  [But  storage  is]  a  promising 
market  for  them.  He  adds  that  if 
Cisco  can  make  the  right  part¬ 
nerships  with  vendors  such  as 
EMC,  which  Lehman  uses,  he 
could  see  the  benefits  of  having 
Cisco  in  the  SAN. 

This  month,  Cisco  announced 
resale  deals  with  EMC, Hitachi, HP 
and  IBM  to  resell  its  MDS  9000 
storage  switch. 

IP  commoditization 

Despite  having  its  core  markets 
wrapped  up  and  strong  momen¬ 
tum  from  its  growth  enterprise 
areas,  Cisco  still  needs  to  work 


Gaining  share 

While  the  LAN  switch  market  shrank  over  the  last  two  years  . . . 

Worldwide  Layer  2  to  Layer  7  LAN  switch  market  revenue  (in  millions) 
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. . .  Cisco  has  made  the  best  of  it  by  stealing  business  from  top  rivals. 

Worldwide  Layer  2  to  Layer  7  LAN  switch  market  share  (in  millions) 
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Gore  markets 

While  Cisco  strives  to 
enter  new  markets, 
routers  and  switches 
remain  the  bulk  of  its 
business  for  now. 

Cisco  product  revenue 
categories  (Qi  -  03,  ’03) 


Total  product  revenue: 

$11.7  billion 
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hard  to  secure  its  future,  many  in¬ 
dustry  observers  say. 

“Growth  markets  like  voice,  stor¬ 
age,  security  and  wireless  have 
long-term  potential,  but  [Cisco]  is 
not  seeing  huge  revenue  streams 
from  those  areas,”  says  Mark 
Fabbi,  vice  president  and  re¬ 
search  director  at  Gartner. 

“The  issue  here  is  commoditiza¬ 
tion  of  Cisco’s  core  businesses,” 
says  Frank  Dzubeck,  president 
and  CEO  of  Communications 
Network  Architects.  Cisco  has 
acknowledged  new  competition 
in  routing  and  switching,  such  as 
Dell  and  Huawei,  which  offer  low- 
cost,  standards-based  gear.  Such 
vendors  are  “John  Chambers’ 
worst  nightmare,”  Dzubeck  says, 
because  Dell’s  distribution  chan¬ 
nels  are  of  the  same  scale  as 
Cisco’s,  and  Huawei  has  lower 
cost  structures. 

“There  are  a  lot  of  new  entrants 
into  this  market  who  would  like 
that”  switching  and  routing  are 
commodity  technologies,  says 
Charlie  Giancarlo,  Cisco’s  senior 
vice  president  for  switching,  voice 
and  carrier  systems.“But  what  we 
see  is  customers  who  don’t  look 
to  the  cheapest  possible  product 
per  se.  They  look  to  the  product 
that  will  allow  them  to  get  what 
they  need  to  get  done,  but  also 
operate  at  the  lowest  possible 
[total  cost  of  ownership].  That 
doesn’t  speak  to  commodity 
products.” 

Still,  Huawei  had  Cisco  worried 
enough  that  the  firm  brought  two 
patent  infringement  lawsuits 
against  Huawei  earlier  this  year. 

“[Huawei]  has  a  cost  structure 
in  place  that  no  one  in  the  indus¬ 
try  has,”  says  Nick  Lippis,  presi¬ 
dent  of  consulting  firm  Strategic 
Networks.  A  U.S.  technology  ven¬ 
dor  such  as  Cisco  might  spend 
$140,000  per  year, per  engineer,  he 


says,  but  Huawei  can  maintain 
more  talent  for  about  half  the 
cost  per  employee.  The  recent 
joint  venture  with  3Com,  which 
will  resell  Huawei  gear  in  the  U.S., 
also  could  prove  to  be  a  formid¬ 
able  foe  to  Cisco. 

“Large  enterprises  are  going 
to  have  to  look  at  [Huawei’s] 
products,  just  because  they 
would  be  delinquent  if  they 
didn’t,”  Lippis  says. 

Talking  telecom 

Despite  its  declining  core  mar¬ 
kets  and  low-cost  competitors 
nipping  at  its  heels,  some  say  a 
looming  telecom  market  re¬ 
bound  could  be  the  magic  bullet 
for  Cisco’s  woes. 

“They’re  biding  their  time,  trying 
to  find  some  growth  markets  and 
staving  off  declines  in  the  rest  of 
the  enterprise,”  Gartner’s  Fabbi 
says  of  Cisco, “then  preparing  for 
longer  term  growth  spurred  by 
telecom.” 

Cisco’s  service  provider  busi¬ 
ness  hasn’t  been  a  happy  one  as 
of  late.The  percentage  of  revenue 
from  Cisco’s  service  provider  line 
of  business  has  been  halved  over 
the  past  four  years,  from  40%  in 
1999-2000  to  20%  now.  Most  of 
that  is  attributable  to  the  down¬ 
turn  in  the  telecom  market, where 
service  provider  capital  spending 
is  now  less  than  half  of  what  it 
was  in  1999-2000. 

But  Cisco  also  stumbled  in 
marketing  to  service  providers 
by  preaching  instead  of  listen¬ 
ing  to  what  they  needed.  Cisco 
now  is  attempting  to  re-engage 
them  through  interaction  with 
operational  personnel  within 
the  carriers. 

“We  count  on  the  service  pro¬ 
viders  to  account  for  a  very  sig¬ 
nificant  portion  of  our  revenue 
within  four  or  five  years.as  high  as 
40%, ”  says  Roland  Acra,  Cisco 
senior  vice  president  and  service 
provider  CTO.“What  we  learned  is 
that  these  guys  have  a  lot  of  in¬ 
cumbency  a  lot  of  inertia  they 
need  to  work  through.  A  lot  of  the 
improved  relations  we  have  with 
them  have  to  do  with  us  realizing 
the  way  forward  was  to  help  them 
through  the  [circuit-to-packet] 
transition,  and  build  the  tools  and 
the  infrastructure,  as  well  as  help 
them  with  services  and  [to]  go  to 
market.” 

The  improved  relations  have 
paid  off.SBC  is  purchasing  Ciscos 
12000  series  Internet  Routers  for  a 
nationwide  OC-192  IP  backbone 
network  that  is  intended  to  trans¬ 
port  services  such  as  Dedicated 
Internet  Access  and  SBC-Yahoo 
DSL 

See  Cisco,  page  15 
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Start-up  launches  secure  storage  gear 


■  BY  DENI  CONNOR 

The  security  of  storage  data  distributed 
out  of  data  centers  has  become  paramount 
now  that  IP  —  with  the  advent  of  iSCSI  and 
other  IP  storage  technologies  —  is  being 
used  more  often  to  transport  storage  infor¬ 
mation  across  networks. 

Start-up  iReady  is  one  of  the  first  vendors 
to  offer  storage  adapters  that  combine  IP 
Security  (IPSec)  authentication  and 
encryption  capability  with  the  iSCSI  trans¬ 
port  protocol,  while  preserving  hard-to- 
maintain  performance  at  a  price  that  is 
inexpensive  enough  to  spur  rapid  deploy¬ 
ment  in  IP  storage  networks. 

The  company  announced  last  week  three 
iSCSI  host  bus  adapters:  the  IR-1011C 
Secure  Storage  Adapter,  the  1R-1011F 
Secure  Storage  Adapter  for  optical  net¬ 
works  and  the  IR-1011LC  iSCSI  Storage 
Adapter.  The  1R-1011C  and  I R- 1 0 1  IF  have 
implemented  IPSec  in  hardware,  making 
them  less  expensive  and  capable  of  per¬ 
forming  at  speeds  that  are  compatible  with 
Gigabit  Ethernet. 


Vendors  and  The  Internet  Engineering 
Task  Force  (IETF),  which  requires  storage 
devices  to  have  IPSec  authentication  and 
encryption  capability  enabled  to  be  con¬ 
sidered  standards-compliant,  were  con¬ 
cerned  how  IPSec  would  be  implemented. 

Until  recently,  a  debate  raged  within  the 
IETF’s  IP  Storage  Working  Group  over  how 
IPSec  should  be  implemented,  ultimately 
delaying  the  approval  of  the  iSCSI  specifi¬ 
cation.  Vendors  agreed  that  even  though 
IPSec  must  be  enabled  for  storage 
devices,  users  must  be  given  the  choice 
not  to  implement.  That’s  because  detrac¬ 
tors  say  adding  IPSec  capability  to  storage 
traffic  will  compromise  performance  and 
add  an  unnecessary  expense  to  the  cost  of 
an  iSCSI  device. 

In  iSCSI  implementations,  the  IETF  set¬ 
tled  on  three  approaches:  IPSec  imple¬ 
mented  in  hardware  with  single-chip 
ASICs,  in  software  alone,  or  deploy  a  VPN 
device  in  front  of  storage  facilities. 

But  inspecting,  decrypting  and  re-encryp¬ 
ting  each  packet  for  IPSec  can  slow  data 
transfer  on  networks  and  imposes  extra  ov¬ 


erhead  for  users  who  might  not  need  secur¬ 
ity  or  already  have  encrypted  VPNs. 

Many  vendors  have  decided  to  imple¬ 
ment  IPSec  in  software  that  resides  next  to 
the  processor  on  the  adapter.  Other  ven¬ 
dors,  including  Cisco,  say  IPSec  can  be 
implemented  at  a  router. 

“If  customers  are  happy  with  [their  net¬ 
work]  security,  they  don't  need  IPSec  for 
iSCSI,”  says  Mark  Bakke,  technical  lead  for 
Cisco  and  a  co-author  of  the  iSCSI  specifi¬ 
cation. “That,  along  with  the  hardware  cost 
of  implementing  a  high-performance  IPSec 
solution,  is  a  main  reason  Cisco  is  offering 
IPSec  as  a  separate  product,  rather  than 
integrating  it  with  our  storage  products.” 

QLogic,  one  of  the  leaders  in  Fibre 
Channel  and  iSCSI  adapters,  with  a  38% 
market  share  according  to  Gartner,  imple¬ 
ments  IPSec  on  a  separate  processor  from 
the  iSCSI  storage  processor. 

Integration  of  IPSec  with  the  iSCSI  ASIC  is 
a  method  that  iReady  says  gives  users  the 
wire-speed  performance  they  expect  of 
Gigabit  Ethernet  at  prices  that  rival  those  of 
Adaptec,  Intel,  QLogic  and  Emulex. 


“IReady  is  fundamentally  changing  the 
value  curve  and  throwing  in  IPSec  for  an 
incremental  amount,”  says  Arun  Taneja, 
senior  analyst  with  the  Taneja  Group. 

Unlike  other  iSCSI  adapters,  iReady 
adapters  will  transport  iSCSI  or  Gigabit 
Ethernet  traffic.  They  are  expected  to  be 
available  in  the  third  quarter  starting  at 
$200  for  the  1R-1011LC  iSCSI  Storage 
Adapter,  $300  for  the  copper  IR-1011C 
Secure  Storage  Adapter,  and  $400  for  the 
fiber  1R-1011F  Secure  Storage  Adapter  for 
optical  networks.  They  will  ship  with 
Windows  and  Linux  drivers.  ■ 


Correction 


■  In  a  sidebar  ("The  'Frankenstein'  spec") 
to  our  review  of  802,1  Ig-based  wireless 
LAN  products  (May  12,  page  46),  we  mis¬ 
takenly  assigned  two  frequencies  to 
802.11g.  The  frequency  for  802.11g  is 
2.4GHz;  the  frequency  for  802,11a  is  5GHz. 
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Dell  servers  use  cost-effective,  industry-standard 
technology  such  as  Intel51  Xeorf  processors. 
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Get  on  the  fast  track  to  migration.  Visit  www.dell.com/migration16  and  go  to  the  Dell  UNIX  Migration  online  calculator  for  a  free  migration  assessment. 
A  Dell  migration  solution  comes  complete  with  end-to-end  migration  services  including  baseline  assessment,  risk/migration  planning,  ROI  analysis, 
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continued  from  page  12 

Cisco  is  also  now  the  preferred  provider 
for  specific  SBC  managed  service  prod¬ 
ucts,  including  IP  telephony,  IP  VPNs,  securi¬ 
ty,  storage  networking  and  WLANs. 

Sprint  has  upgraded  its  SprintLink  IP  net¬ 
work  to  support  a  Cisco  technology  called 
Layer  2  Tunneling  Protocol  Version  3.  The 
technology  lets  a  carrier  encapsulate  Layer 
2  traffic,  such  as  frame  relay,  for  transport 
over  a  Layer  3  network. 

Despite  the  recent  efforts  and  progress, 
Cisco  still  has  a  long  way  to  go  to  buck  up 
that  revenue  contribution  from  service 
providers  to  40%,  analysts  say  Only  3%  of 
carrier  capital  expenditures  come  to 
Cisco,  a  figure  that  does  not  inspire  awe 
considering  that  there  are  only  a  handful 
of  major  suppliers  to  carriers,  according  to 
Joe  McGarvey,  senior  analyst  for  carrier 
infrastructure  at  consulting  firm  Current 
Analysis. 

“Cisco  is  far  from  a  giant  in  the  telecom¬ 
munications  space,”  McGarvey  said  in  a  re¬ 
cent  report.“Cisco  has  not  been  able  to  cap¬ 
ture  a  larger  percentage  of  service  provider 
spending." 

And  though  Cisco  has  made  some  pro¬ 
gress  in  gaining  the  confidence  of  carriers 
after  its  initial  missteps,  this  will  be  an  on¬ 
going  challenge  for  the  company  rather 
than  a  one-time  event. 

“They  had  to  basically  apologize  for 
their  behavior,”  says  Bill  Lesieur,  director 
of  Technology  Business  Research.  “And 
they  still  have  an  enterprise-oriented 
organization.  How  can  they  build  similar 
relationships  with  service  providers 
worldwide  that  Alcatel,  Lucent  and  Nortel 
have  now?  That’s  the  biggest  challenge 
outside  of  the  U.S.” 

Cisco’s  strategy  for  strengthening  rela¬ 
tions  with  carriers  worldwide  and  increas¬ 
ing  its  share  of  carrier  spending  revolves 
around  the  deconstruction  of  barriers  to 
circuit-to-packet  infrastructure.  They  in¬ 
clude  capital  and  operational  costs, such  as 
the  development  of  operational  support 
systems  and  provisioning  scripts  for  IP/ 
packet  networks;  and  identifying  profitable 
applications  and  services  for  these  nets. 

Once  these  barriers  are  broken  down, 
Cisco’s  total  available  market  and  its  share 
of  carrier  capital  expenditures  should 
increase,  Acra  says. 

“This  is  the  dominant  logic  in  our  strat¬ 
egy’  he  says. 

King  Cisco 

For  now,  it’s  good  to  be  king. 

No  other  network  firm  has  fought  off  the 
bear-market  woes  better  than  Cisco, 
observers  say 

“Cisco’s  core  [enterprise]  markets  are  flat, 
but  profits  need  to  keep  going  up  quarter 
over  quarter”  to  please  Wall  Street,  Gartner’s 
Fabbi  says. 

Some  say  this  comes  at  the  expense  of 
customers. 

“Cisco’s  market  position 


helps  the  company  to 
charge  a  premium  over 


competition  and  maintain  high  margins, 
which  results  in  robust  cash  generation,’ Tal 
Laini,  a  Merrill  Lynch  analyst,  wrote  in  a 
recent  report.“With  $21  billion  of  cash  and 
equivalents  on  its  balance  sheet  . . .  Cisco 
could  buy  its  10  closest  competitors  and 
still  have  change  left  over? 

Many  of  Cisco’s  competitors  now  lag  way 
behind  in  terms  of  product  breadth  and 
support,  or  have  suffered  financial  in¬ 
stability,  or  both. The  result  of  this  has  been 
a  relentless  flight  by  customers  to  Cisco  as 
an  all-things-network  vendor. 

The  average  cost  of  a  LAN  port  was  $75 
last  year.  Cisco’s  average  price  was  $132, 
according  to  Synergy.  And  when  compared 
with  the  average  price  of  its  competitors, 
the  “Cisco  tax”  climbs  even  higher,  to  70%. 

“Enterprises  at  this  point  look  at  Cisco  as 
a  safe  choice  [and]  don’t  care  how  much  it 
costs,”  Fabbi  says.’That  just  baffles  me,  con¬ 
sidering  the  tough  economic  times.  Major 
publicly  traded  companies  are  losing 
money  in  tough  times  across  the  globe.  But 
when  you  look  at  network  infrastructure, 
they’re  willing  to  just  give  their  money  to 
Cisco.” 

Others  see  danger  in  a  Cisco-at-all-costs 
world. 

“This  is  not  a  good  thing,”  Dzubeck  says. 
“It’s  not  healthy  Just  as  it  was  a  bad  thing  to 
have  an  all-IBM  environment  in  the  1980s, 
the  same  applies  for  Cisco  today;  getting 
too  tied  into  any  one  vendor  isn’t  good.” 

“We  run  into  very  few  situations  where 
customers  will  just  say,  ‘I’ll  go  with  Cisco,’ 
and  not  worry  about  it,”  Cisco’s  Giancarlo 
says.  He  adds  that  Cisco  products  are 
packed  with  features  to  help  companies 
reduce  maintenance  and  management 
costs.  And  those  features  cost  a  little 
more. 

“The  bigger  [payoff]  for  customers  is  if 
you  put  in  capabilities  that  lower  overall 
costs  than  strictly  coming  out  with  the  low¬ 
est-priced  product,”  Giancarlo  says. 

For  many  corporations,  the  value  of  an 
end-to-end  Cisco  network  is  more  impor¬ 
tant  than  a  perceived  loss  of  pricing  lever¬ 
age  or  single-vendor  dependence. 

“I  can  understand  the  concern,”  Lehman 
Brothers’  Beyman  says,  “but  I  have  not  yet 
seen  a  reason  to  be  concerned,”  with  rely¬ 
ing  on  Cisco  as  the  company’s  sole  net¬ 
work  provider. 

In  many  ways,  he  adds, “it’s  great  to  have  a 
single  solutions  provider;  all  the  stuff  works 
with  each  other,  and  you  don’t  have  to 
spend  a  lot  of  time  and  money  stitching 
together  other  vendors’  solutions.” 

“Cisco’s  pricing  is  designed  to  obviously 
make  a  profit,”  says  Eric  Mucci,  head  of  IT 
at  Beiersdorf,  a  Norwalk,  Conn.,  manufac¬ 
ture  of  skincare  products.The  higher  price 
for  Cisco  gear,  he  says, “is  justified  by  differ¬ 
ent  people  in  different  ways.  Often,  the 
‘suits’ are  happy  paying  the  premium  price 
for  Cisco  gear  because  it’s  a  well-recog¬ 
nized  brand  that  they  can  trust  to  run  their 
business  systems.  From  an  IS  point  of  view, 
the  ROI  [for  Cisco  gear]  is  easy  to  calcu- 

Get  more  inf.r*»ti.«  online.  late  after  )USt  one  cal1  to 
DecFinder:  5946  TAC,”  he  says,  referring  to 

www.nwfusion.eom  Cisco’s  Technical  Assist- 


Next  week:  When  you  look  beyond 
Cisco’s  status  as  Wall  Street  bellwether, 
there’s  the  technology  that  makes  the 
company  successful.  In  our  second 
installment  we  take  a  look  at  where 
Cisco's  core  technology  —  IOS  —  is 
headed.  ■ 


ance  Center.  Mucci  says  Cisco’s  support 
lets  smaller  firms  deploy  complicated 
technology  with  less  personnel. 

“Most  IS  departments  are  understaffed  — 
ours  included  —  so  providing  that  level  of 
support  to  untrained  administrators  is 
worth  the  premium  price,”  he  says. 


Visit  www.dell.com/migration16  and  go  to  the  Dell  UNIX  Migration  online  calculator  for  a  free  migration 
assessment.  Dell  offers  a  host  of  end-to-end  migration  services,  including  those  for  Oracle®  9/.  Call  1-866-871-9882 
today  to  speak  with  a  Dell  representative.  Together  you  can  assess  your  individual  needs  and  then  develop  a 
cost-effective  plan  for  UNIX  migration. 
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Mgmt.  vendors  tell  users:  Go  configure 


Facts  and  figures 

These  start-ups  are  looking  to  automate  configuration  and 
change  management  on  enterprise  networks. 


Company/product 

Description 

Price 

AlterPoint 

DeviceAuthority  1.1 

Software  that  automates 
configuration  and  change 
management  for  network 
devices. 

Roughly  $4,000 
for  40  devices; 
$8,000  for  100 
devices. 

Gold  Wire 

Formulator200; 
Formulator200  HA 

Appliances  that  provide  single 
sign-on  for  network  access 
and  centralized  configuration 
control  for  network  gear. 

Start  at  $25,000 
and  $100,000, 
respectively. 

Rendition 

Networks 

TrueControl  2.0 

Software  that  tracks  and 
regulates  configuration 
change  management  across 
network  devices. 

About  $30,000 
for  75  managed 
nodes. 

■  BY  DENISE  DUBIE 

Three  vendors  separately  are 
rolling  out  new  or  improved  prod¬ 
ucts  that  address  one  of  the  most 
overlooked  areas  of  network 
management:  configuration. 

AlterFbint,  Gold  Wire  and  Ren¬ 
dition  Networks  say  their  software 
or  appliances  will  help  compa¬ 
nies  automate  parts  of  configura¬ 
tion  management.  Configuration 
is  a  key  piece  of  FCAPS  (Fault, 
Configuration,  Accounting,  Per¬ 
formance,  Security),  a  widely 
used  model  in  network  manage¬ 
ment  circles. 

Configuration  and/or  change 
management  entails  capturing 
and  keeping  a  database  of  all  the 
settings  from  switches,  routers, 
firewalls,  load  balancers  and 
other  network  devices  from  mul¬ 
tiple  vendors,  and  then  tracking 


changes  made  to  those  devices. 

Management  vendors  such  as 
BMC  Software,  Computer  Associ¬ 
ates,  HP  and  IBM  Tivoli  offer  tools 


in  the  other  FCAPS  areas,  but  con¬ 
figuration  management  has  been 
handled  largely  by  equipment 
makers.  For  example, Cisco, Nortel 


and  Foundry  Networks  offer  soft¬ 
ware  to  manage  configuration  on 
their  specific  gear,  but  multiven¬ 
dor  tools  haven’t  come  out  until 
recently. 

Keith  Logan  says  he  didn’t  real¬ 
ize  multivendor  configuration 
management  tools  existed  until 
AlterPoint  approached  him  last 
fall.  Logan,  a  senior  network  ana¬ 
lyst  for  First  American  Flood  Data 
Services  in  Austin,  Texas,  says 
AlterFbint’s  DeviceAuthority  soft¬ 
ware,  now  on  Version  1.1,  interest¬ 
ed  him  because  of  the  challenge 
his  staff  faced  checking  configu¬ 
rations  and  tracking  changes 
across  40  routers,  switches,  fire¬ 
walls  and  other  network  devices. 

“I  have  to  say  I  was  lax  in  that 
department,  and  I  always  knew  it 
was  a  problem,”  he  says.  “There 
wasn’t  a  simple  way  to  manage 
configurations  before,  but  this 


product  definitely  answered  a 
specific  problem.” 

Such  tools  can  help  IT  staffs 
implement  consistent  configura¬ 
tions  across  devices.  They  also 
can  be  used  to  pinpoint  the 
source  of  network  problems 
more  quickly  And  with  stored 
configurations,  network  man¬ 
agers  can  more  quickly  roll  back 
devices  to  the  last  known  accu¬ 
rate  configuration. 

The  change  management  as¬ 
pect  of  these  products  provides 
added  security  Because  the  soft¬ 
ware  and  appliances  require 
users  to  sign  in  with  a  secure 
password  and  track  each  change 
made  to  the  configuration  of  a 
device,  network  managers  can 
spot  unauthorized  access  and 
potential  security  breaches. 

Rendition,  like  AlterFbint  and 
See  Configure,  page  63 


Linux  users  deflect  SCO’s  threats 


BY  NETWORK  WORLD  STAFF 


Users  were  unfazed  by  the  latest  round  of 
saber  rattling  in  SCO  Group’s  intellectual  prop¬ 
erty  war. 

In  a  letter  to  commercial  Linux  users  distributed 
last  week  and  posted  online,  Dari  McBride,  presi¬ 
dent  and  CEO  of  SCO,  warned  users  they  could 
be  liable  for  intellectual  property  violations  that, 
it  alleges,  exist  in  Linux  source  code.  (See  the  let¬ 
ter  at  www.nwfusion.com,  DocFinder:  5943.) 

SCO’s  threat  to  commercial  users  comes  after  its 
March  lawsuit  against  IBM,  in  which  it  charged 
that  IBM  misappropriated  Unix  code. 

“We’re  deeply  involved  with  Linux,  and  we’re 
not  turning  back  until  the  courts  tell  us  to,  which 
may  take  so  much  time  that  I’ll  be  retired  by  then,” 
says  Joe  Fbole,  technical  director  at  Boscov’s 
Department  Stores  in  Reading,  Fb. 

“In  the  longer  term  it  makes  me  less  likely  to 
purchase  or  recommend  SCO  products,  since  it 
appears  SCO  is  not  confident  in  its  ability  to  thrive  or  even 
survive  on  the  merits  of  its  products  and  service  alone,” 
says  lan  Wilson,  senior  consultant  for  Infotop  Limited,  a 
software  company  in  Bedfordshire,  England. 

“1  am  looking  into  native  Linux  development  tools  and 
database  software  so  that  our  applications  can  be  ported 
to  Linux  without  any  dependency  on  SCO  compatibility 
features ’’Wilson  says.“lt  concerns  me  that  SCO  is  acting  in 
this  way  I  hope  that  SCO  does  not  succeed,  that  the  matter 
is  resolved  quickly  and  that  SCO  [will]  focus  on  producing 
and  supporting  good  quality  products.” 

An  executive  from  a  Massachusetts  software  company 
said: “It  isn't  going  to  keep  us  from  using  Linux.This  move 
is  a  necessary  one  on  [SCO’s]  part  to  show  they  really 
believe  in  their  legal  case,  even  if  it  means  losing  what  lit¬ 
tle  [Linux]  business  they  had." 

In  last  week’s  warning, SCO  said  Linux’s  source  code  con¬ 
tains  illegal  inclusions  of  SCO  Unix  intellectual  property 

“SCO  owns  the  Unix  operating  system,  and  as  we’ve  been 


Letter  To  Linux  Customers 

SCOsource 
May  12, 2003 

Dear  commercial  Linux  user: 

SCO  holds  the  rights  to  the  UNIX  operating  system  software 
originally  licensed  by  AT &T  to  approximately  6,000  companies  and 
institutions  worldwide  (the  “UNIX  Licenses").  The  vast  majority  of 
UNIX  software  used  in  enterprise  applications  today  is  a  derivative 
work  of  the  software  originally  distributed  under  our  UNIX  Licenses. 
Like  you,  we  have  an  obligation  to  our  shareholders  to  protect  our 
intellectual  property  and  other  valuable  rights. 

In  recent  years,  a  UNIX-like  operating  system  has  emerged  and  has 
been  distributed  in  the  enterprise  marketplace  by  various  software 
vendors.  This  system  is  called  Linux.  We  believe  that  Linux  is,  in 
material  part,  an  unauthorized  derivative  of  UNIX. 

As  you  may  know,  the  develoDment  process  for  Linux  has  differed 
substantially  from  the  dpv-  *  process  for  other  enterprise 

operating  systems.  C  L*  *’  • 

and  sr 


SCO  Group  President  and  CEO  Dari  McBride  warned  1,500 
companies  last  week  that  they  could  be  liable  if  using  Linux. 


researching  our  suit  against  IBM,  we’ve  been  doing  our  due 
diligence, ’’says  Chris  Sontag, senior  vice  president  and  gen¬ 
eral  manager  of  SCOsource,  a  business  division  formed  to 
manage  SCO’s  Unix  intellectual  property  “We’ve  started 
identifying  more  and  more  lines  of  code  that  are  derived 
from  our  Unix  System  V  source.” 

Sontag  says  that  the  Linux  kernel  and  “extended  areas  of 
Linux  distributions”  contain  copyright  violations.  But  he 
declined  to  say  where  the  alleged  violations  are.  During  the 
next  few  weeks,  SCO  will  begin  to  present  this  evidence, 
under  nondisclosure  agreement,  to  a  select  group  of  indus¬ 
try  analysts,  Sontag  said. 

One  person  who  is  particularly  eager  to  see  SCO’s  evi¬ 
dence  is  Linux’s  creator,  Linus  Torvalds. “I’d  personally  love 
to  hear  what  it  is  they  consider  infringing,”  he  said  in  an 
e-mail  interview.  Torvalds  said  that  because  of  the  open 


nature  of  the  Linux  development  process,  it  is 
possible  to  track  the  origin  of  any  section  of  the 
Linux  kernel. “We’ve  got  all  the  history  available 
somewhere,  and  it  should  be  pretty  easy  to  show 
when  something  was  added  and  what  the  lin¬ 
eage  was,”  he  wrote. 

Boscov’s  Fbole  says  SCO’s  allegations  are  weak 
—  built  on  fear, uncertainty  and  doubt.“lf  100  pro¬ 
grammers  coded  an  identical  function,  I’ll  bet 
that  several  of  those  programs  would  be  so  simi¬ 
lar  you’d  think  they  copied  one  another”  he  says. 

Observers  question  whether  SCO  will  be  able 
to  enforce  any  ownership  rights  it  might  have 
after  contributing  for  years  to  the  general  public 
license  (GPL). 

“If  the  complainant  does  own  any  of  the  source 
code,  I  suspect  that  they  have  abrogated  their 
right  to  such  code  by  allowing  it  to  remain  in  the 
public  domain  well  over  a  decade  while  at  the 
same  time  contributing  to  the  open  source  code 
and  further  propagating  the  GPL,  thus  abdicating 
any  right  to  ownership  they  may  have  had  at  one  time," one 
reader  posted  on  Network  World  Fusion’s  site  last  week. 

Beyond  the  legalese,  SCO  also  announced  last  week  it 
was  abandoning  its  Linux  business  —  which  wasn’t  much 
of  a  moneymaker,  according  to  the  company  An  SCO 
spokesman  says  that  less  than  2%  of  SCO’s  2002  revenue 
came  from  Linux.  The  company  says  it  has  about  5,500 
Linux  customers. 

IDG  News  Service  correspondent  Robert  McMillan  contrib¬ 
uted  to  this  story. 


More  online! 

Read  an  interview  with  Chris  Sontag,  senior 
vice  president  and  general  manager  of  SCO's 
SCOsource  division. 
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HP  rolls  out  powered  LAN  switches 

Vendor  targets  advanced  LAN  features  beyond  simple  wiring  closet  connectivity. 

■  BY  PHIL  HOCHMUTH 


■  Linux  server  vendor  Pogo  Linux 
this  month  unveiled  what  it  says  is 
one  of  the  industry’s  first  Linux  Serial 
ATA  workstation.  The  Velocity-DX 
contains  new  Velocity  Seagate 
Barracuda  Serial  ATA  hard  drives 
that  are  coupled  with  Intel's  dual  Xeon 
processors  to  improve  their  reliability 
and  performance.  The  hard  drives 
support  Intel’s  3.06-GHz  Xeon  chips, 
which  have  a  533-MHz  front  side  bus, 
the  Intel  E7505  chipset  for  dual  Xeon 
workstations  and  four  DIMM  slots  for 
up  to  8G  bytes  of  double  data  rate 
error  correcting  code  registered 
memory.  It  is  available  now  for  $2,000. 

■  InfiniGon  Systems  says  it  is  mak 
ing  it  easier  for  customers  to  roll  out 
server  networks  using  InfiniBand,  the 
next  generation  high-speed  bus  tech¬ 
nology.  The  company  last  week  intro¬ 
duced  InfiniView  Fabric  Manager, 
a  graphical-user-interface-based 
management  application  that  can  be 
embedded  into  its  enterprise-class 
InfinlO  7000  switching  system  and 
into  its  entry-level  InfinlO  2000  sys¬ 
tem.  Fabric  Manager  automatically 
gives  users  a  comprehensive  view  and 
control  of  all  components  within  an 
InfiniBand  fabric,  says  InfiniCon  CEO 
Chuck  Foley.  Also  last  week,  InfiniCon 
introduced  InfiniServ  7000,  a  dual-port 
Host  Channel  Adapter  that  complies 
with  PCI-X.  The  InfiniServ  7000  will 
make  it  easier  to  connect  a  variety  of 
servers  into  an  InfiniBand  network, 
the  company  says. 

■  Snap  Appliance  introduced  the 
Snap  Server  4500  last  week,  a  Ill- 
high  departmental  network-attached 
storage  appliance.  The  4500  uses  the 
Intel  Pentium  4  processor  and  sup¬ 
ports  Active  Directory,  Unix  Network 
Information  Service,  SNMP  and  net¬ 
work  or  local  backup  for  manage¬ 
ment.  The  4500  also  uses  a  Linux- 
based  operating  system  and  includes 
snapshot  technology  to  provide  con¬ 
sistent,  point-in-time  copies  of  data 
without  administrator  intervention. 
The  Snap  Server  4500  is  offered  in 
two  capacities:  480G  bytes  for  $4,300 
and  720G  bytes  for  $5,800. 


HP  last  week  announced  a  slew  of  prod¬ 
ucts  that  provide  corporate  LAN  users  a 
host  of  advanced  features  —  such  as  self- 
powered  Ethernet  and  robust  security  and 
convergence  software. 

The  company  announced  the  ProCurve 
2650,  2626  and  5300x1  switches,  which 
can  be  used  to  provide  power  and  data 
to  IP  telephones,  wireless  LAN  (WLAN) 
access  points  or  IP  video  cameras,  via 
Category  5e  or  6  cabling.  This  lets  such 
devices  be  deployed  more  easily 
because  standard  AC  outlets  are  not 
needed  for  power.  And  when  connected 
to  an  uninterruptible  power  supply 
(UPS),  the  switches  can  provide  emer¬ 
gency  power  to  devices. 

New  to  HP’s  ProCurve  family  of  stack- 
able  LAN  switches  is  48-port  ProCurve 
2650  and  24-port  ProCurve  2626.  HP  also 
has  added  a  powered  switch  blade  for  its 
ProCurve  5300x1  wiring  closet  chassis. 

The  new  switches,  which  are  scheduled 
to  be  available  in  the  fall, are  based  on  the 


Blue  Titan  Software  this  week  will 
release  a  new  version  of  its  Web  services 
router  that  will  provide  management 
capabilities  to  corporations  adopting  Web 
services. 

The  company’s  Network  Director  2.0  is 
designed  to  sit  next  to  traditional  routers 
and  handle  application-level  Web  ser¬ 
vices  traffic,  which  is  message-intensive. 
The  router  is  part  of  an  emerging  layer  of 
services  that  Forrester  Research  is  calling 
the  XML  network  or  the  Simple  Object 
Access  Protocol  (SOAP)  network. 

“The  point  is  that  the  XML  network  sits 
in  the  IP  network  and  enables  you  to 
build  out  these  Web  services  applica¬ 
tions,”  says  Ted  Schadler,  an  analyst  with 
Forrester. “You  need  a  router  to  move  the 
messages.  While  there  is  still  some  mys¬ 
tery  in  Web  services,  service-oriented 
architectures  and  distributed  computing, 
at  the  end  of  the  day  what  you  have  are 


HP’s  ProCurve  5300x1  switch  features  a 
power-over-Ethernet  blade. 

IEEE’s  802. 3af  power-over-Ethernet  (PoE) 
standard. 

The  ProCurve  stackables  and  the  chas¬ 
sis-based  PoE  switches  can  provide  up 
7.5  watts  of  power  to  803.3af-compliant 
devices,  which  is  enough  to  power  most 
standard  PoE-capable  WLAN  access 
points  and  IP  telephones,  HP  says. 
Fifteen  watts  of  power  per  port  can  be 
delivered  to  devices  that  require  more 
electricity  if  an  external  power  system 
module  is  added  to  the  switches,  the 
company  says. 

The  switches  have  been  certified  to 


network  applications.” 

Schadler  says  corporations  will  need 
a  new  network  layer  that  offers  those 
applications  such  services  as  transaction 
control,  security,  service-level  agree¬ 
ments,  application  load  balancing  and 
nonrepudiation. 

Companies  such  as  AmberPoint,  Ac¬ 
tional,  Confluent  Software,  Digital  Evo¬ 
lution,  Infravio  and  Talking  Blocks  are 
some  of  the  start-ups  building  tools  for 
that  new  layer. 

At  the  core  of  Network  Director  is  a  pol¬ 
icy-enforcement  engine  called  Control 
Points,  which  runs  on  BEA  Systems’ 
WebLogic  application  server  and  sits  next 
to  traditional  routers  and  switches.  The 
Blue  Titan  Engine  distributes  policies, 
such  as  an  uptime  requirement,  to  the 
Control  Pbints,  and  the  Blue  Titan  Man¬ 
ager  writes  the  policies. 

Inversion  2.0,  Blue  Titan  has  added  what 
it  calls  Fabric  Services,  which  make  all  the 
See  Blue  Titan,  page  20 


power  IP  phones  from  3Com,  Cisco  and 
Mitel,  and  phones  from  Avaya,  NEC  and 
Nortel  are  being  certified.  PoE  switches 
are  also  available  from  Avaya,  3Com, 
Cisco,  Foundry  Networks,  NEC,  Nortel  and 
PowerDsine. 

“HP  needed  to  add  [PoE] ,”  to  the  Pro- 
Curve  switch  line,  says  Zeus  Kerravala,  an 
analyst  with  The  Yankee  Group.  He  says 
that  PoE  products  bring  HP  up  to  speed 
with  most  of  its  competition,  who  have 
had  such  products  out  for  a  while. 

But  Kerravala  questions  how  serious  HP 
will  get  about  its  network  business,  given 
the  small  market  share  the  company  has 
in  switching,  and  the  relationship  it  has 
with  market  leader  Cisco. 

“Switching  is  a  very  crowded  market,” 
he  says,  “and  HP  Professional  Services 
sells  a  lot  of  Cisco  [equipment] .’’He  adds 
that  HP  would  be  better  off  taking  advan¬ 
tage  of  the  volumes  Cisco  can  move  in 
network  products  by  selling  complemen¬ 
tary  products  —  such  as  servers,  PCs  and 
enterprise  software  —  in  conjunction 
with  Cisco. 

“Why  would  they  put  that  relationship 
[with  Cisco]  at  risk  for  a  couple  of  per¬ 
centage  points  of  market  share  [in  LAN 
equipment]?” he  asks. 

HP  also  announced  new  WLAN  gear 
and  plans  to  co-develop  a  Session 
Initiation  Protocol  (SlP)-based  softphone 
client  for  HP  iPaq  PDAs  for  Mitel 
Networks  IP  PBXs.The  new  wireless  gear 
could  help  make  802.11  networks  more 
secure  and  better  at  handling  applica¬ 
tions.  Meanwhile,  HP  is  looking  to  further 
its  partnership  with  Mitel  by  developing 
voice-over-lP  applications  that  could 
help  make  IP  telephony  more  mobile. 

The  company  says  it  also  is  working 
with  Mitel  on  software  for  iPaq  PDAs  to 
act  as  softphone  clients  for  Mitel  IP  tele¬ 
phony  networks.  Mitel  makes  an  IP 
phone  —  the  5230  —  that  has  a  cradle 
for  inserting  an  iPaq,  to  let  the  user 
access  and  dial  phone  numbers  from  an 
iPaq  address  book  application.  The  new 
software  would  let  an  iPaq,  fitted  with  an 
802.11b  card  and  headset,  act  as  a  wire¬ 
less  extension  for  a  Mitel  IP  5230  desk 
phone.  The  softphone  client  will  be 
based  on  SIP  which  Mitel’s  3300  IP  PBX 
and  phones  used  for  call  control  and  to 
support  voice  applications. 

As  reported  last  week  in  Network  World 
(www.nwfusion.com,  DocFinder:  5938), 

See  HP,  page  20 


Blue  Titan  updates 
router  for  Web  services 


■  BY  JOHN  FONTANA 


I  AM  A  CISCO 
CATALYST  6500. 


I  AM  A  SNARLING 
PACK  OF 
DOBERMANS. 

I  AM  INTEGRATED  SECURITY.  I  HAVE  THE  POWER  TO  PROTECT 
YOUR  NETWORK  FROM  THE  INSIDE, THE  OUTSIDE  AND  FROM 
EVERYWHERE  IN  BETWEEN.  I  ALWAYS  KNOW  WHO  IS  ON  THE 
GUEST  LIST  AND  HAVE  THE  POWER  TO  DENY  THOSE  WHO  AREN'T 
ON  IT.  I  SNIFF  OUT  THREATS  SO  YOU  CAN  STAY  PRODUCTIVE.  I  AM 
MORE  THAN  A  CISCO  CATALYST  6500. 


cisco.com/securitynow 
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Dan  Bricklin  fostered  the  PC  revolu¬ 
tion  when  he  helped  create  VisiCalc 
for  the  Apple  almost  25  years  ago.  It 
and  its  successors,  Lotus  1-2-3  and  Excel, 
were  the  original  “killer  app”  for  PCs. 

Bricklin  went  on  from  that  success  to  give 
us  the  granddaddy  of  presentation  pro¬ 
grams  in  Dan  Bricklin’s  Demo  —  used  to 
produce  demonstrations,  presentations, 
simulations  and  prototypes  of  computer 
programs.  It’s  still  being  sold.  While  not  a 
killer  app,  it  was  a  neat  idea. 

Now  Bricklin  has  a  new  idea  that  involves 
small  business  and  the  directory  arena, 
and  he  might  just  be  on  to  something  yet 
again. 

Small  &  Medium  Business  Metadata 


The  next  ‘killer  app? 


(SMBmeta)  is  an  XML  specification  for 
identification  and  location  information  for 
small,  primarily  bricks-and-mortar  busi- 
nesses.Third-party  information  aggregators 
could  harvest  the  data  with  robots  and 
build  business  directories  that  let  con¬ 
sumers  easily  find  the  goods  and  services 
they  seek.  See  http://smbmeta.org  for 
details  on  how  it  will/should  work. 

Burton  Group’s  Jamie  Lewis  (www.nw 
fusion.com,  DocFinder:  5928)  says  he 
thinks  this  is  a  better  method  of  finding 
businesses  and  services  than  the 
IBM/Microsoft  Universal  Description, 
Discovery  and  Integration  technology 
(http://uddi.org),  which  up  to  now  hasn’t 
taken  off  and  probably  never  will.  Lewis 
calls  the  concept  behind  SMBmeta  a 
“loosely  coupled,  self-organizing  director^’ 
and  offers  the  possibility  of  joining  the 
SMBmeta  concept  with  peer-to-peer  tech¬ 
nologies. 

In  many  ways,  the  concept  encompasses 
what  I’ve  called  the  “personal  directory” 


(see  DocFinder:  5929)  and  is  similar  to  the 
“.DIR”  top-level  domain  Novell  proposed  a 
few  years  ago  (DocFinder:  5930). 

In  fact,  the  .DIR  specification  is  remark¬ 
ably  similar  to  the  SMBmeta  specification 
in  scope  and  direction.  But  we’ll  need  to 
encompass  more  than  just  small  to  mid¬ 
size  businesses  for  this  to  ever  graduate 
from  being  a  simple  niche  product. There 
are  some  problems  that  need  to  be 
addressed,  such  as  scaling.  One  smb- 
meta.xlm  file  per  Web  domain  would 
have  to  include  a  huge  number  of  lines 
for  the  locations  of  every  McDonald’s 
restaurant,  for  example. 

A  way  also  will  need  to  be  found  to 
extend  this  concept  to  individuals  and  a 
way  to  simply  federate  the  data  (on  a 
dynamic, ad  hoc  basis)  and  aggregate  it.  I’ll 
explore  these  concepts  more  in  the 
Network  World  “Identity  Management” 
newsletter  over  the  coming  weeks  (sign  up 
for  the  newsletter  at  DocFinder:  5932). 

Just  as  VisiCalc  begat  Excel  and  “Demo” 


www.nwfusion.com 


begat  PowerPoint  and  Flash,  SMBmeta 
could  be  the  prototype  for  the  next 
killer  app. 

Kearns ,  a  former  network  administrator, 
is  a  freelance  writer  and  consultant  in 
Silicon  Valley.  He  can  be  reached  at 
wired@vquill.  com. 


Up  of  the  Week 


VisiCalc  was  released  for 
the  IBM  PC  in  1981  — 
and  it  still  runs  on  today’s 
machines!  Head  over  to 
DocFinder:  5931,  where  you 
can  download  a  copy  and 
experience  what  was  the 
cutting  edge  of  PC  comput 
ing  some  20  years  ago. 


Netilla  upgrades  SSL-based  remote-access  gear 


■  BY  TIM  GREENE 

SOMERSET,  N.J.  —  Netilla  is 
expanding  capabilities  of  its 
Secure  Sockets  Layer  remote- 
access  gear  to  support  Web- 
based  and  fat-client  applications, 
making  the  gear  better-suited  to 
a  broad  spectrum  of  corporate 
remote-access  needs. 

With  Release  4  of  its  Netilla 
Service  Platform  (NSP)  software, 
the  company  is  adding  to  exist¬ 
ing  support  for  Microsoft  Term¬ 
inal  Services,  Unix,  Linux  and 
mainframe  applications. 

Netilla’s  NSP  devices  act  as  a 
proxy  between  remote  users  con¬ 
necting  via  the  Internet  and  cor¬ 
porate  servers  hosting  applica¬ 
tions  they  want  to  access.  Re¬ 
mote  users  log  on  to  the 
machines  via  Web  browsers  and 
establish  an  SSL  session  with  the 
NSP  The  NSP  then  acts  as  a  go- 


Blue  Titan 

continued  from  page  17 

functions  of  the  router  avail¬ 
able  as  individual  Web  services. 
That  means  the  Fabric  Services 
can  be  integrated  with  manage¬ 
ment  infrastructures  such  as 
HP’s  OpenView  management 
platform  to  integrate  data  such 
as  uptime  for  a  Web  services 
application. 

"Because  of  where  we  sit  we 
have  an  incredible  amount  of 
data,  and  we  can  share  that 


between  with  the  host  server  and 
the  remote  machine. 

With  the  software  upgrade,  cus¬ 
tomers  can  access  Web  applica¬ 
tions  from  any  PC  with  a  browser 
that  supports  SSL.  Netilla’s  previ¬ 
ous  support  did  not  include  Web- 
based  applications  and  required 
a  thin  client  on  the  remote 
machine. 

With  the  addition  of  an  HTTP 
proxy  in  Release  4,  users  can 
connect  to  Web  applications. 
And  a  new  Universal  Windows 
Adapter  client  tunnels  traffic 
from  client  software  such  as 
Lotus  Notes  that  reside  on  the 
remote  PCs  to  the  NSP  box  via 
SSL  streams,  says  Reggie  Best, 
Netilla’s  CEO. 

The  Web  capability  will  let 
Deborah  Heart  and  Lung  hospi¬ 
tal  in  Browns  Mills,  N.J.,  grant 
remote  user  Web  access  to 
Microsoft  Outlook,  among  other 


with  other  systems  on  the  net¬ 
work,”  says  Sam  Boonin,  vice 
president  of  marketing  for  Blue 
Titan. “A  router  can  handle  any 
IP  traffic.  We  work  in  a  similar 
way. You  don’t  put  management 
services  on  the  application;  you 
put  management  on  the  net¬ 
work  and  use  it  to  handle  all 
the  SOAP  traffic.  We  enforce 
run-time  policies  for  such 
things  as  access  control, 
[SLAs],  routing  and  load 
balancing.” 

Blue  Titan  also  has  added 


Netilla's  NSP  G-Class  remote-access 1 
ports  1,000  thin  client  sessions. 

applications,  says  Gerard 
Williams,  director  of  IS  for  the 
hospital.  Before  the  release,  the 
hospital  used  Netilla  gear  but 
was  limited  to  using  it  for  a 
Windows-Terminal-Server-sup- 
ported  application  called  Med- 
itech  that  handles  medical  and 
billing  records. 

The  advantage  of  browser- 


event  capabilities  called  Active 
Event  Messaging  and  Adaptive 
Policy  Execution,  which  allows 
for  real-time  changes  to  poli¬ 
cies.  It  also  supports  the  emerg¬ 
ing  security  standard  WS- 
Security  and  two  standard  pro¬ 
posals,  WS-Policy  and  WS-Reli- 
able  Messaging. 

Network  Director  costs 
$150,000,  which  includes  four 
Control  Points. The  software  also 
run  The  software  runs  on  rLinux 
and  Sun  Solaris,  in  addition  to 
BEA  WebLogic.  ■ 


SSL  server  costs  $65,000  and  sup- 

based  remote  access  is  that 
remote  computers  need  little  or 
no  support  from  Deborah’s  limit¬ 
ed  IT  staff.“We  couldn’t  get  to  all 
of  them,”  Williams  says.  Before 
buying  an  earlier  version  of  the 


HP 

continued  from  page  17 

HP  also  released  its  ProCurve 
700  series  of  WLAN  switches.The 
700  series  family  includes: 

•  720wl  Access  Controller,  a 
switch  for  connecting  802.11 
access  and  securing  WLAN  client 
connections 

•  740wl  Access  Control  Server,  a 
management  appliance  for  con¬ 
figuring  WLAN  access  rights  and 
policies 

•  760wl,  which  combines  the 
720wl  and  740wl  features  into 
one  box  for  smaller  networks  (up 
to  400  clients). 

The  720wl  switches  come  with 


Netilla  platform,  the  hospital 
relied  on  phone  calls  and  faxes 
to  complete  transactions. 

Some  of  the  new  Netilla  fea¬ 
tures  are  similar  to  those  that 
vendors  such  as  Aventail  and 
Neoteris  offer,  says  Michael  Suby, 
an  analyst  with  Stratecast 
Partners. 

Netilla  also  is  introducing  a 
new  hardware  platform  called 
NSP  G-Class,  created  for  large 
companies  that  is  capable  of 
supporting  up  to  1,000  thin- 
client  sessions  and  2,500  Web 
access  or  fat-client  sessions.  The 
box  costs  $65,000.  This  week 
Netilla  will  announce  $6  million 
in  additional  funding  from  its 
investors,  bringing  the  total  to 
$17  million.  ■ 


four  ports  for  connecting  wire¬ 
less  access  points  and  can  be 
expanded  to  support  eight 
access  points. 

The  switches  support  Triple- 
DES,  802.  lx  and  Wireless 
Encryption  Protocol  for  en¬ 
crypting  radio  traffic. The  boxes 
also  can  let  secured  WLAN 
clients  roam  among  access 
points  while  maintaining  IP 
address  and  virtual  LAN  set¬ 
tings.  WLAN  users  say  loss  of 
these  settings  can  occur  while 
roaming  between  access 
points,  and  they  can  cause 
application  problems. 

The  700  series  of  wireless  gear 
will  be  available  in  June.B 
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VERITAS  industry-leading  backup,  replication  and  clustering  software 
virtually  eliminates  Microsoft  Exchange  downtime.  Is  your  CEO  happy? 
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The  switch  that  adapts 
to  any  environment. 

And  always  will. 


ENTERASYS 


Introducing  the  Matrix™  N-Series 

Scalability  and  security  adapted  to  your  enterprise. 


Because  your  needs  change  so  often,  you 
need  a  switch  that  can  keep  up.  That’s  the 
revolutionary  new  Matrix  N-Series.  Thanks 
to  an  exclusive  distributed  architecture — 
where  all  switching  and  control  functions 
reside  on  each  module — the  N-Series  lets 
you  cost-effectively  add  bandwidth,  users  and 
applications  on  the  fly.  And  no  other  switch 
offers  such  a  low  entry  cost. 

A  wide  range  of  secure  connectivity 
options  means  the  Matrix  N-Series  will 
scale  to  support  converged  applications 


like  video  streaming,  VoIP  and  more  without 
expensive  upgrades.  With  unsurpassed 
reliability,  flexibility  and  investment 
protection,  the  N-Series  is  a  key  component 
to  any  Business-Driven  Network .™ 

Now  and  always. 

For  a  FREE  whitepaper  on  the  Matrix 
N-Series  and  Multilayer  Packet  Classification, 
go  to  enterasys.com/nw/n-series 
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Lessons  from  leading  users 


Johnson  &  Johnson  solidifies  security 


Getting  certified 


Johnson  &  Johnson  is  phasing  out  passwords  in  favor  of  digital 
certificates  for  identity  management.  Here’s  a  look  at  the  key 
components  of  the  company’s  new  security  architecture. 
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Certificate  authority  server 
Can  issue  or  revoke  certificates  to  end 
users  or  business  partners.  It  also 
keeps  tabs  on  certificate  status. 


Microsoft  Active 
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The  company’s  Active  Directory  running 
on  Windows  2000,  which  now  holds 

250,000  entries,  contains  user  information 
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and  public-key  certificates. 
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Registration  authority  server 

Works  hand-in-hand  with  the 
certificate  authority  server  to  verify 
the  identity  of  certificate  holders. 


■  BY  ELLEN  MESSMER 

Information  security  managers  at  health¬ 
care  giant  Johnson  &  Johnson,  with  more 
than  $36  billion  in  revenue  each  year  and 
108,000  employees  working  in  more  than 
200  separate  businesses,  have  begun  the 
large-scale  rollout  of  digital  certificates  that 
eventually  will  replace  passwords  at  the 


■  Sendmail  last  week  shipped  a 
new  mail  server  aimed  at  corpora¬ 
tions  looking  to  provide  low-cost  e- 
mail  access  to  workers  who  don't 
have  a  dedicated  computer  or  even  a 
desk.  The  so-called  deskless  worker 
is  the  target  for  the  Workforce 
Mail  server,  a  Linux-based  software 
package  that  integrates  Sendmail’s 
e-mail  software,  HP’s  ProLiant 
servers  and  Intel’s  Centrino  wireless 
platform.  Workforce  Mail  is  based  on 
Sendmail’s  MailCenter  software.  It 
includes  content  management  fea¬ 
tures  such  as  antispam  and  antivirus 
filters  and  a  policy  engine  to  manage 
the  exchange  of  corporate  data. 
Users  can  access  the  server  with  a 
variety  of  devices,  including  those 
based  on  Intel’s  Centrino  wireless 
technology.  For  10,000  users  the  price 
is  $69  per  user,  per  year,  including 
server  software  with  antivirus  and 
antispam  capabilities,  hardware  and 
maintenance. 

■  A  Swedish  mobile  messaging  com¬ 
pany's  software  will  be  offered  for 
integration  into  Microsoft  Office  2003, 
allowing  users  to  send  Short  Mes¬ 
sage  Service  messages  from  Micro¬ 
soft  Outlook.  The  SMS  Executive 
product  from  General  Wireless  will 
be  included  in  Microsoft  Office 
Marketplace,  a  listing  of  products  and 
services  that  work  with  or  comple¬ 
ment  Office.  Microsoft  plans  to  re¬ 
lease  Office  2003  in  the  third  quarter. 


corporation. 

J&J  is  installing  a  directory-enabled  pub¬ 
lic-key  infrastructure  with  digital  certifi¬ 
cates  as  the  basis  for  security  in  authenti¬ 
cation  of  identity  and  encryption  of  docu¬ 
ments.  The  change  that  required  J&J  to 
retrofit  many  of  its  business  applications 
to  make  use  of  PKI. 

Digital  certificates  are  electronic  creden¬ 
tials  that  link  a  user’s  identity  with  a  pub¬ 
lic-private  encryption  key  pair  that  facili¬ 
tates  “signing”of  documents  by  the  sender, 
prevents  document  tampering  and  en¬ 
sures  confidentiality  through  encryption. 

But  it’s  been  a  slow  process,  requiring 
significant  changes  that  include  in¬ 
stalling  an  enterprise  directory  and  cus¬ 
tomizing  existing  applications  from 
Oracle,  SAP  and  Siebel  Systems  to  sup¬ 
port  digital  certificates. 

“We’re  now  in  production  deployment  of 
5,000  certificates,  and  we  expect  to  have 
issued  10,000  by  year-end,”  Rich  Guida,J&J 
information  security  manager,  said  during 
a  presentation  at  the  recent  RSA  Con¬ 
ference  in  San  Francisco.  Guida  and  Gary 
Secrest,  also  a  J&J  information  security 
manager,  described  the  challenges  the  cor¬ 
poration  has  faced  to  do  this. 

The  basic  equipment  for  any  PKI  rollout 
includes  a  certificate  authority  server  that 
lets  supervisors  issue  digital  certificates  to 
those  they  supervise  and  a  revocation 
authority  server  to  revoke  the  certificates. 
J&J  has  deployed  this  equipment  from 
e-Certify  for  this  purpose. 

In  the  long  run,  digital  certificates  at  J&J 
are  intended  to  replace  passwords  because 
it  can  cost  as  much  as  $37  per  year,  per  em¬ 
ployee,  to  support  password  changes  and 
reset  requests.  But  it’s  not  clear  that  certifi¬ 
cates  will  be  more  economical  for  J&J, 
which  spends  $1.4  billion  on  information 
management  each  year.  The  driving  force 
is  that  PKI  is  hands-down  far  better  security 
than  passwords, Secrest  said. 

The  ability  to  sign  and  encrypt  mail  and 
documents  will  make  it  easier  to  satisfy  se¬ 
curity  requirements  from  federal  regulators 
such  as  the  Food  and  Drug  Administration 
and  Health  &  Human  Services,  he  added. 

But  rolling  out  PKI  on  an  enterprisewide 
scale  is  fraught  with  obstacles,  the  chief 
one  being  that  many  of  the  commercial 
applications  used  at  J&J,  including  those 
from  Documentum,  J.D.  Edwards,  Oracle, 


SAP  and  Siebel,  can’t  make  use  of  digital 
certificates  out  of  the  box  and  have  to  be 
retrofitted  to  use  them. 

“We  spend  a  lot  of  time  working  to  enable 
the  applications  for  PKI,”  Guida  said.  “And 
we  spend  a  lot  of  time  working  with  ven¬ 
dors  to  do  this.” 

To  retrofit  these  business  applications,  J&J 
has  used  RSA  Security’s  BSAFE  tool  kit, 
which  has  been  tested  and  evaluated 
under  the  National  Institute  of  Standards 
and  Technology  FIPS  certification  program. 
J&J’s  security  managers  said  they  prefer  to 
use  independently  evaluated  products. 

In  contrast  to  many  of  the  enterprise  CRM 
and  accounting  applications,  Microsoft’s 
out-of-the-box  applications  are  often  PKI- 
ready,  Guida  said. 

“Outlook  2000,  Microsoft  Office  XP  and 
Internet  Explorer  are  Windows  applica¬ 
tions  that  are  very  PKI-aware  today  Guida 
said. 

Secrest  said  the  PKI  deployment  has  led 
J&J’s  IT  department  to  instigate  other 
changes  as  well,  such  as  centralizing  infor¬ 
mation  about  users  in  an  online  enterprise 
directory.  “We  have  200  human  resources 
systems,  and  we  had  no  enterprise  direc¬ 
tory  Secrest  said. 


The  enterprise  directory  now  in  place 
holds  the  information  about  users  and  the 
public-key  certificates  that  can  be  ac¬ 
cessed  to  send  a  signed  message  to  the 
intended  recipient.  J&J  selected  Microsoft’s 
Active  Directory  running  on  Windows 
2000, which  now  holds  250,000  entries. With 
J&J  on  a  buying  spree  of  hundreds  of 
much-smaller  companies  for  more  than  a 
year,  the  IT  departments  have  gained  prac¬ 
tice  in  quickly  setting  up  feeds  to  the  main 
Enterprise  Directory. 

“The  employee  has  to  be  in  the  Enterprise 
Directory  and  authorized  by  human  re¬ 
sources,  to  request  a  certificate,” Guida  said. 

J&J  intends  to  issue  digital  certificates  for 
about  150,000  individuals,  including  busi¬ 
ness  partners  that  use  the  J&J  corporate 
network  regularly  One  challenge  in  operat¬ 
ing  a  PKI  is  learning  how  to  quickly  aggre¬ 
gate  lists  of  revoked  certificates  —  which 
are  known  as  the  certificate  revocation  lists 

—  to  enforce  security  policy 

J&J  maintains  its  own  encryption  root  key 

—  a  core  part  of  the  PKI  technology  for 
issuing  certificates  —  and  to  make  it  a  little 
harder  to  discover  this  secret  key  keeps  the 
root  key  in  three  sections  stored  at  three 
locations.  ■ 
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I  expect  it  would  get  Bill's  attention 


Here  it  goes  again.  Microsoft  made  the 
front  pages  recently  for  yet  another 
security  bug,  this  time  in  its  Passport 
authentication  service. 

What  made  this  more  than  your  average 


today’s-bug  story  was  the  too-hyped  obser¬ 
vation  that  Microsoft  could  be  assessed  a 
fine  of  $1 1,000  per  Passport  account.  With 
200  million  or  so  Passport  accounts,  not  a 
small  number  of  which  were  created  just  to 
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Block  Porn  &  Control  Spam  with 
Message  Inspector™ 

Your  Best  Choice  for  Accurate  Spam  &  Email  Filtering 


With  Message  Inspector,  protecting  your  employees,  assets  and  reputation  has  never  been  easier.  Rely  on  this  award-winning 
email  content  filtering  solution  to:  block  porn  control  spam  maximize  productivity  and  IT  resources. 

With  Message  Inspector,  you’ll  benefit  from  accurate  identification  of  junk  email;  comprehensive  out-of-the  box  reporting;  immediate 
notification  of  policy  violations;  fully  customizable  policies,  rules,  filters,  actions  and  more.  Don’t  let  offensive  or  unsolicited  email 
disrupt  your  organization  —  call  800-767-6683  to  request  your  FREE  Message  Inspector  trial  today! 
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enable  one  or  another  Microsoft  software 
product,  the  fine  would  amount  to  $2.2  tril¬ 
lion.  Even  Bill  would  notice  such  a  hit.  But 
the  prospect  of  a  significant  reduction  in 
the  national  debt  is  not  the  subject  of  this 
column;  common  sense  is. 

The  idea  of  hitting  Microsoft  upside  the 
head  with  a  fine  of  almost  eight  times  its 
market  cap  reminds  me  of  what  a  cab  dri¬ 
ver  in  Singapore  told  me  about  driver’s 
education  there.  He  said  the  fines  for  traffic 
violations  were  not  high  enough  to  get  the 
attention  of  rich  folk,  so  caning  was  more 
effective  at  sending  a  message.  No  one 
could  say  this  fine  would  not  get  the  atten¬ 
tion  of  whatever  remained  of  Microsoft.  But 
enough  silliness  —  as  CNN  noted, “any  fine 
would  be  significantly  lower.” 

To  put  things  in  perspective,  it  has  been 
said  that  Windows  has  somewhere  be¬ 
tween  30  million  and  50  million  lines  of 
code.  To  only  have  a  bug  a  week  with  a 
code  base  of  that  size  is  doing  rather  well. 
But  sometimes  the  bug  is  not  one  of  bad 
code,  but  of  bad  design,  as  seems  to  be  the 
situation  in  this  latest  case. 

The  press  reports  said  the  person  who 
found  the  problem  did  so  with  a  few  min¬ 
utes  of  poking  around  after  someone 
hacked  his  Passport  account.  It  seems  that 
a  feature  designed  to  let  a  user  recover 
from  a  forgotten  password  let  someone 
other  than  the  user  take  over  the  account 
and  have  access  to  whatever  data  was 
there.  After  figuring  out  the  design  prob¬ 
lem,  the  bug  discoverer  said  he  tried  to 
contact  Microsoft  a  number  of  times. When 
he  didn’t  get  any  response,  he  posted  the 
information  on  the  FullDisclosure  security 
list  on  May  7  (see  www.nwfusion.com, 
DocFinder:  5933).  Microsoft  blocked  the 
exploit  soon  after. The  design  bug  seems  to 
be  one  that  a  first-year  security  apprentice 
would  have  been  demoted  over. 

The  underlying  problem  is  not  that  Micro¬ 
soft  isn’t  perfect,  nor  is  it  that  Microsoft 
might  not  have  responded  to  warnings  it 
received.The  underlying  problem  is  that  for 
Passport  to  play  the  core-of-the-world  role 
that  Microsoft  wants  it  to  play,  the  company 
would  have  to  be  perfect  and  be  able  to  re¬ 
spond  before  it  received  notice  of  a  prob¬ 
lem.  Remember,  Microsoft  wants  this  ser¬ 
vice  to  have  important  information  about 
as  many  Internet  users  as  it  can.  More  than 
200  million  already;  many  times  that  in 
Microsoft's  dreams. 

Common  sense  says  that  putting  so  much 
sensitive  information  in  one  place  is  a  very 
very  bad  idea.  It  becomes  a  major  target  of 
attention  and  when  (not  if)  compromised, 
the  damage  can  be  great.  Hackers,  spies  or 
disgruntled  employees,  someone  will  get 
into  the  playpen  every  now  and  then. What 
will  be  the  damage  next  time? 

Disclaimer:  Harvard’s  sense,  by  definition, 
is  not  common.  But  the  above  observation 
is  my  own. 


Bradner  is  a  consultant  with  Harvard 
University's  University  Information  Systems. 
He  can  be  reached  at  sob@sobco.com. 
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Web  and  Email  Filtering  Solutions 


Philips  Medical  Systems  ADAC 


“We  did  some  shopping,  checked  out  other 
solutions,  and  decided  on  Canon’s 
Canobeam  DT-50.  The  feeling  around  here  is 
that  it  was  well  worth  the  money  we  spent." 

Eric  Caddenhead,  Director  of  Network 
Operations  for  Philips  Medical  Systems  - 
ADAC. 


ORBIS  International 

"The  Canobeam  provides  us  wth  a  very 
effective  path  in  and  out  of  the  airplane. 
Since  it’s  an  optical  beam,  it  requires  no 
frequency  allocation  and  can  be  set  up  very 
quickly”  (in  fixed  and  temporary  situations.) 

Ismael  Cordero ,  Manager  of  Biomedical 
Engineering  for  ORBIS. 


Visiting  Nurse  Association  Of 
Brooklyn. 

"Canobeam  proved  essential  to  ensuring 
that  our  expanded  computer  system  was 
up  to  the  task." 

Robert  Lanfranchi,  Director  of  Information 
Technology  Systems  for  l /NAB 


U.S.  Department  Of  Labor. 

“Choosing  the  Canobeam  DT-50  has  been 
instrumental  in  allowing  us  to  carry  out 
critical  public  services  at  top  speed...  it’s 
important  that  we  be  able  to  respond 
without  delays  in  the  network." 

Darryl  Aus.  Sr  Network  Engineer 
for  PWBA  Department  Of  Labor. 


DT-50 


Auto  Tracking  Is  One  More  Reason 
Users  Select  Canobeam 


Canon's  FSO  line  of  Canobeam 
products  has  emerged  as  the 
choice  for  more  and  more 
installations  and  a  wide  range 
of  applications.  From  providing 
communication  in  areas  where 
fiber  couldn't  be  laid;  to  meeting 
disaster  recovery  needs; 


to  allowing  private  organizations 
to  expand  services  and 
government  agencies  to  work 
faster,  Canobeam  has  met  the 
challenge  by  providing  fast  set¬ 
up,  no  FCC  licensing  or  channel 
allocation,  and  interference-free, 
confidential,  reliable  transmission. 
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Find  out  more  at  canobeam.com 


1-800-321-4388  ( Canada :  905-795-2012) 
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Canobeam  models  include: 

•  DT-55,  Gigabit  Ethernet,  1.25Gbps 

•  DT-50,  Versatile  Standard,  25-622Mbps 

•  DT-30,  Economical  Quality,  10-156Mbps 
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More  FSO  Users 
Connect  With  Us. 
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IBM.  the  e -business  logo.  eServer  and  x Series  are  trademarks  or  registered  trademarks  of  International  Business  Machines  Corporation.  Linux  is  a  registered  trademark  ot 
Linus  Torvalds  Windows  is  a  trademark  ot  Microsoft  Corporation  m  the  United  States,  other  countries,  or  both.  UNIX  is  a  registered  trademark  ot  The  Open  Group  in  the 
United  Stales  and  other  countries.  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks  of  others.  C  2003  IBM  Corporation.  All  rights  reserved. 
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IBM 


Triggers  routine  analysis  to  help  prevent  component  failure.  On  demand. 
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The  human  body  can  anticipate  problems  on  demand.  As  can  IBM 
eServer.  Select  eServer  xSeries™  models  are  designed  to  sense  when 
any  one  of  six  system  components  exceeds  a  safe  threshold.  They 
respond  by  notifying  the  system  administrator,  allowing  you  to  replace 
a  part  up  to  48  hours  before  it  fails. 

eServer:  servers  for  on  demand  business. 

Can  you  see  it?  See  it  at  ibm.com/eserver/ondernand 
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Legislation  refocuses  corp.  reporting  systems 


■  BY  ANN  BEDNARZ 

9 

It’s  said  that  politics  makes  for  strange  bedfellows.  New 
legislation  designed  to  place  tighter  controls  on  cor¬ 
porate  accountability  is  doing  just  that. 

IT  and  finance  departments  —  which  historically  have 
not  always  seen  eye-to-eye  on  technology  expenditures 
—  are  working  closer  than  ever  to  review  and  modernize 
companies'  financial  reporting  systems  to  comply  with 
regulations  set  out  in  the  Sarbanes-Oxley  Act  of  2002. 

Passed  by  Congress  last  July  following  a  season  of  high- 
profile  accounting  scandals,  the  Sarbanes-Oxley  Act  re¬ 
quires  publicly  traded  companies  to  provide  more  timely 
accurate  and  detailed  financial  reports. 

One  of  the  first  provisions  of  the  new  legislation  to  take 
effect  requires  CEOs  and  CFOs  to  certify  under  oath  the 
accuracy  of  their  corporations’  financial  filings.  Other  pro¬ 
visions  relate  to  changes  in  Securities  and  Exchange 
Commission  (SEC)  filing  schedules.The  deadline  for  fil¬ 
ing  an  annual  report  is  shrinking  from  90  days  to  75  days 
this  year  and  60  days  next  year,  for  example.  Similarly  the 
deadline  for  filing  quarterly  reports  is  shrinking  from  45 
days  to  40  days  this  year  and  35  days  next  year. 

As  public  companies  scramble  to  understand  the 
Sarbanes-Oxley  Act,  IT  departments  increasingly  are 
being  called  into  the  fray  to  assess  how  compliance 
would  affect  firms’  IT  systems. 

Mike  Gabaly  director  of  cash  forecasting  and  financial 
performance  management  at  Lockheed  Martin  in 
Bethesda,Md.,says  Sarbanes-Oxley  has  raised  concern  at 
his  company.  But  Gabaly  is  confident  that  plans  to  consol¬ 
idate  Lockheed  Martin’s  myriad  financial  planning, 
accounting  and  corporate  tax  systems  with  a  single  soft- 


Ifclf  I  don't  protect  the  assets 
of  my  company,  I’m  hurting 
our  shareholders.  9  9 

Irving  Tyler 

Vice  President  and  CIO,  Quaker  Chemical 


ware  package  from  Longview  Solutions  will  cover  most  of 
the  legislation’s  current  requirements.“We’re  pretty  well 
positioned  to  support  all  that  certification  due  to  the  fact 
that  we’re  consolidating  all  of  our  information  into  one 
application,"  he  says. 

While  companies  might  have  met  the  act’s  initial  re¬ 
quirements  with  little  disruption  to  existing  financial  re 
porting  processes,  pending  provisions  have  broader  IT 
implications  that  could  require  a  company  to  overhaul  or 
upgrade  its  systems, says  ARM  Research. The  research  firm 
cites  sections  404  and  409  of  the  new  legislation  as  partic¬ 
ularly  onerous. 

Section  404  requires  companies  to  certify  their  financial 
reporting  processes  and  the  structure  of  their  internal 
audit  control.  Companies  need  to  document  and  attest 
not  only  their  final  numbers,  but  also  the  processes  by 


which  they  arrived  at  those  numbers. 

This  provision  has  elevated  the  issue  of  internal  controls 
to  the  CEO  and  board  level,  requiring  senior  manage¬ 
ment  to  pay  greater  attention  to  issues  such  as  confiden¬ 
tiality,  systems  integrity  business 
continuity  and  disaster  recovery 
says  A1  Decker,  executive  director 
for  security  and  privacy  services  at 
Electronic  Data  Systems. 

“Most  people  don’t  get  up  in  the 
morning  thinking  about  internal 
controls,’’  Decker  says.“What 
Sarbanes-Oxley  has  done  is  taken 
what  may  have  been  relegated  to 
the  IT  department  and  elevated  it 
to  a  significant  business  issue.” 

Section  404  is  of  most  concern  to 
customers,  agrees  Susan  Foley 
Kane,  vice  president  of  product 
marketing  for  PfeopleSoft’s  financial 
management  group.“Every  CFO, 
every  financial  organization  that 
we  get  into  our  customer-visit  center  right  now,  this  is 
what  they’re  struggling  with,”  Kane  says. 

Under  Section  409,  companies  must  disclose  material 
events  that  affect  the  business  within  48  hours  of  when 
they  occur. This  includes  not  only  financial  events,  but 
also  operational  events, such  as  if  an  airline  loses  its  best 
fuel  supplier.  Under  the  act,  companies  will  be  required 
to  report  the  event  and  its  financial  consequences. 

These  rules  are  more  cumbersome  than  some  earlier 
provisions,  observers  say  But  just  how  much  more  cum¬ 
bersome  is  debatable.  Obscuring  the  issue  is  that  the  SEC 
is  still  fleshing  out  the  details  of  the  law.  Exactly 
what  defines  a  material  event  is  still  open  to 
interpretation,  for  example. 

AMR  suggests  Sarbanes-Oxley  has  the  poten¬ 
tial  to  be  bigger  than  Y2K  in  how  it  affects  com- 
panies.The  firm  predicts  the  Fortune  1000  will 
spend  more  than  $2.5  billion  in  investigation 
and  initial  compliance-related  work. 

However,  more  conservative  industry  watchers 
say  many  public  companies  are  in  good  shape 
to  comply  with  more  stringent  corporate  report¬ 
ing  requirements. 

“A  lot  of  the  strong  considerations  that  have 
been  in  place  in  many  organizations  for  inter¬ 
nal  controls  have  now  been  brought  into  law’’ 
Decker  says.“The  good  news  is  that  probably  80%  of 
companies  in  the  country  have  a  reasonable  set  of  inter¬ 
nal  controls.” 

Companies  might  have  to  make  minor  modifications  to 
internal  processes,  but  most  will  be  able  to  avoid  making 
wholesale  changes  to  their  systems,  Decker  says. 

In  any  case, Sarbanes-Oxley  is  weighing  on  users’  minds. 

Customers  are  calling  and  asking  about  corporate  gov¬ 
ernance  issues  daily, says  Phil  Strand,  global  strategist  and 
program  director  for  the  financial  management  division 
of  software  maker  SAS  Institute. 

Experts  say  a  lot  of  companies  haphazardly  handle  fi¬ 
nancial  reporting  —  particularly  if  a  company  has  grown 
by  mergers  and  acquisitions  and  inherited  a  sea  of  dis¬ 
parate  systems.  A  company  might  capture  transactional 
data  in  multiple  ERP  systems,  extract  it,  reformat  it,  and 


Changes  coming 

An  AMR  Research 
survey  of  60  Fortune 
1000  companies  found 

85% 

predict  Sarbanes-Oxley 
will  require  changes  in 
IT  and  application 
infrastructure. 


put  it  into  spreadsheets  for  manipulation.  It  can  be  tough 
to  trust  the  information  considering  the  route  it  took  to 
get  there. 

“A  lot  of  people  are  still  using  spreadsheets  to  do  report¬ 
ing,”  Kane  says.“One  algorithm 
that’s  wrong  in  a  spreadsheet  could 
mean  that,  unknowingly  a  CFO  is 
signing  off  on  something  that  is  not 
correct.” 

Some  view  the  new  legislation  as 
an  opportunity  to  kick-start  initia¬ 
tives  that  have  taken  a  back  seat  to 
other  IT  spending  priorities. 

“Companies  philosophically  have 
always  wanted  to  do  this,”  says 
Dave  Murray,  CFO  of  software 
maker  Longview  Solutions.“A  lot  of 
what  companies  are  doing  now 
through  sweat  capital  and  spread¬ 
sheets  makes  people  a  little  un¬ 
comfortable.”  Sarbanes-Oxley  is  the 
impetus  to  put  an  integrated  solu¬ 
tion  in  place,  he  says.“It  has  put  a  fear  into  finance  that 
really  wasn’t  there  before,”  Murray  says. 

That  fear  has  created  an  opportunity  for  ERP  vendors 
and  best-of-breed  analytics  vendors.  Oracle,  FteopleSoft 
and  SAP  have  announced  business  intelligence  and  busi¬ 
ness  performance  management  products  in  the  past  sev¬ 
eral  months.  In  addition,  dedicated  business  intelligence 
software  makers  such  as  Cartesis,  Cognos,  Comshare, 
Hyperion,  Longview  and  SAS  offer  performance  manage 
ment  suites  that  tackle  financial  reporting,  forecasting, 
consolidation  and  analysis. 

Project  validation 

Sarbanes-Oxley  wasn’t  the  impetus  of  Quaker 
Chemical’s  financial  systems  overhaul,  but  it  will  be  a 
good  test  of  its  effectiveness. 

“When  Sarbanes-Oxley  came  along,  we  found  our¬ 
selves  generally  well  prepared  to  comply  because  we 
had  started  so  many  actions  in  advance,”  says  Irving 
Tyler,  vice  president  and  CIO  at  the  specialty  chemical 
products  manufacturer. 

Quaker  Chemical  is  in  the  middle  of  a  multiyear 
financial-systems  makeover  that  includes  designing 
and  adopting  global  financial  processes;  extending 
data  warehousing  and  business  analytics  software 
from  SAS  to  its  global  operating  companies;  and  con¬ 
solidating  14  transaction  systems  into  a  single  instance 
of  J.D.  Edwards’  ERP  software. 

When  it’s  completed,  the  Conshohocken,  Pb.,  com¬ 
pany’s  new  setup  will  make  it  easier  to  control  access  to 
information  —  an  issue  that  is  critical  to  complying  with 
the  act.“If  I  don’t  protect  the  assets  of  my  company,  I’m 
hurting  our  shareholders, ’’Tyler  says. 

While  not  prescribed  specifically  in  Sarbanes-Oxley, 
protecting  intellectual  property  and  information  assets 
is  an  implied  requirement.  Failing  to  do  so  and  suffer¬ 
ing  a  security  breach  could  constitute  a  material  event, 
for  example. 

Irv  ing’s  advice  to  other  companies  is  to  not  look  at 
Sarbanes-Oxley  as  purely  a  compliance  issue,  but  rather 
to  recognize  that  its  provisions  are  rooted  in  good  busi¬ 
ness  practices.  ■ 


Are  you  prepared? 

Get  a  FREE  APC  white  paper  to 
learn  how  to  address  today's  top 
cooling  needs  in  network  rooms 
and  data  centers 

Just  mail  or  fax  this  completed 
coupon  and  you'll  also  receive 
our  FREE  InfraStruXure"' 
brochure.  Better  yet,  order  both 
today  at  the  APC  Web  site! 

Key  Code 

http://promo.apc.conn  k530y 

(888)  289-APCC  x2827  •  FAX:  (401 )  788-2797 


Legendary  Reliability* 


FREE  White  Paper! 

□  YES!  Please  send  me  my  FREE  white  paper  - 
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□  Cables/Wires  □  Mobile  Protection  □  Surge  Protection  □  UPS  Upgrade  □  Don't  know 
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Legendary  Reliability* 


As  racks  become  increasingly  popu¬ 
lated  with  thinner,  deeper  servers, 
high  power  densities  in  your  server 
room  or  data  center  can  create 
havoc,  from  early  equipment  failures 
to  expensive,  forget-about-your-job- 
security  downtime. 

Introducing  InfraStruXure™  architec¬ 
ture,  the  industry's  only  patent-pend¬ 
ing,  network-critical  physical  infra¬ 
structure.  InfraStruXure™  lets  you 
target  power  and  cooling  precisely 
where  your  mission-critical  applica¬ 
tions  live — the  rack  enclosure. 

And  because  InfraStruXure™  architec¬ 
ture  uses  a  modular,  manageable,  pre¬ 
engineered  approach,  you  can  select 
standardized  components  to  create 
your  own  customized  solutions. 

Which  means  you  can  target  avail¬ 
ability,  pay  as  you  grow,  adapt  to 
change,  and  maximize  efficiency 
while  minimizing  installation,  operat¬ 
ing,  service,  and  maintenance  costs. 

In  times  like  these,  it  pays  to  think 
smart.  For  more  information  on 
InfraStruXure's  open,  adaptable, 
and  integrated  architecture  for  on- 
demand,  network-critical  physical 
infrastructure,  visit  us  online  today 
at  www.apc.com. 


[hot  air] 
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Winner  of  the  Windows  and  .Net  Magazine  "2002  Reader's 
Choice  Award  for  Best  High  Availability  Solution",  the  GCN 
"Best  New  Technology  Award "  at  FOSE,  March  2002. 

I Awarded  to  PowerStruXure ",  which  is  now  included  under 
the  InfraStruXure'brand .) 

Winner  of  the  Communications  Solutions  Magazine's  " 2002 
Product  of  the  Year"  award 
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High  power  densities  can  create  hot 
spots,  which  cause  equipment  failures 
and  expensive  downtime. 


BEFORE 


[cold  air] 


nfraStruXure's  advanced  cooling 
components  help  remove  heat  from 
your  servers  and  target  air  circulation 
where  it  is  most  needed. 


Air  components  designed  for 
InfraStruXure m  are  manageable  via 
network  technology,  and  feature  a 
modern,  reliable  design  with  fewer 
moving  parts. 


AFTER 


Equipment  Racks 


Batteries 


UPSs 


Traditional  data  centers  are  built  out 
for  future  capacity  and  require  a 
large  amount  of  floor  space  that 
could  be  otherwise  utilized.  High 
power  density  racks  create  danger¬ 
ous  hot  spots. 


InfraStruXure"  lets  you  build  out  capacity 
only  as  it's  required.  Save  up  to  50% 
CapEx  and  20%  OpEx*,  and  reclaim  an 
average  of  20%  usable  space. 
InfraStruXure  AIR  delivers  cooling 
directly  where  it  is  needed,  eliminating 
dangerous  hot  spots. 


Infrastructure 


POWER  x  RACK  AIR 


Open,  adaptable  and  integrated 
architecture  for  on-demand 
network-critical  physical  infrastructure 


"Our  Video  on  Demand  (VOD) 
servers  are  air  cooled  from  front 
to  back.  The  APC  racks  that 
house  the  InfraStruXure  are  also 
designed  to  cool  from  front  to 
back.  So  the  same  racks  can 
effectively  house  our  power 
system  and  our  servers." 

Vince  Pombo 

Vice  President  of  Engineering 

Rich  Flanders 

Director  of  Engineering 

Time  Warner  Cable 

"If  I  had  purchased  the  incum¬ 
bent  vendor's  3-phase  upgrade 
model,  I  would  have  paid  75% 
more  in  service  costs  over  the 
next  four  years  and  I  would 
have  had  to  utilize  50%  more  of 
my  precious  floor  space." 

Captain  Timothy  Riley 
Support  Services  Division 

City  of  Newport  Beach  Police  Department 


For  a  closer  look  at  InfraStruXure  ",  attend  a  FREE  APC  Executive 
Breakfast  Seminar  in  your  area.  For  more  information  visit: 
http://promo.apc.com  and  enter  key  code  below. 

‘  Representative  savings  based  on  projected  power  infrastructure  build-out  costs  and  estimated  service  cost  per  unit 
Actual  savings  may  vary. 
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InfraStruXure 

“APC 


Every  product  carrying  this  mark  has 
been  tested  and  certified  for  use  with 
InfraStruXure™  architecture.  Before 
you  buy,  check  for  the  X  to  guarantee 
product  compatibility. 
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Are  you  prepared?  Get  a  FREE  APC  white  paper  to  learn  how  to 
address  today's  top  cooling  needs  in  network  rooms  and  data  centers. 
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YOU  NEED  MORE  THAN  OUT-OF-TH E-BOX  THINKING. 

YOU  NEED  TO  GET  MORE  OUT  OF  THE  BOX 


YOU’VE  ALREADY  GOT. 
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You’ve  got  to  increase  capacity.  Boost  revenue.  Migrate  to  IP. 

And  do  it  all  over  your  existing  network.  At  lower  cost. 

No  one  leverages  your  network  investment  like  Lucent.  We  can  help  you: 

✓  Transform  your  circuit-switched  network  to  enable  new  services  such  as  IP  Centrex 
and  hosted  call  centers,  with  our  new  5E-XC'“  software. 

✓  Bring  Ethernet,  wavelength  and  storage  services  to  your  existing  SONET/SDH  network. 

✓  Leverage  your  current  Frame  Relay  and  ATM  networks  to  deliver  IP  Services 
such  as  VPN  and  managed  bandwidth. 

With  Lucent’s  Navis ®  iOperations  software,  you  can  generate  revenue  from  new  services  without 
additional  OS  investment.  And  the  networking  experts  of  Lucent  Worldwide  Services  can  get  it 
all  working  for  you  fast.  Learn  how  at  www.lucent.com. 

Networks  that  work  smarter.  Networks  that  work  harder.1" 
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Content  delivery  nets  branch  out 

Companies  stress  offerings  that  go  beyond  distributing  static  content 


■  BY  JENNIFER  MEARS 

Phonetrade.com,  a  business-to-business 
trading  exchange  and  catalog  site  for 
mobile  phones  and  accessories,  was  look¬ 
ing  to  expand  its  online  presence.The  com¬ 
pany  owned  by  Global  Business  Link  in 
Gothenburg,  Sweden,  wanted  to  outsource 
its  e-commerce  efforts,  everything  from 
software  downloads  and  security  to  trans¬ 
action  processing  and  hosting. 

It  finally  settled  on  a  provider  that  might 
come  as  a  surprise  to  some  network  exec¬ 
utives:  content  delivery  network  (CDN) 
specialist  Mirror  Image. 

“We  were  looking  for  an  all-inclusive  out¬ 
sourced  e-commerce  solution  that  could 
manage  the  back  end  of  storefront  transac¬ 
tions  and  hosting,”  says  Martin  Eriksson, 
founder  of  GBL. 

Those  aren’t  requirements  that  typically 
would  send  a  company  in  search  of  a  CDN 


■  Sprint  President  and  CEO  Gary 
Forsee  was  named  chairman  of  the 
board  at  the  carrier  last  week.  Al¬ 
though  Forsee  joined  Sprint  from 
BellSouth  in  March  as  the  company's 
new  leader,  former  president  and  CEO 
William  Esrey  still  held  the  title  of 
chairman  during  this  transition  period. 
Esrey  officially  retired  last  week  after 
his  23-year  career  with  Sprint.  The 
carrier  started  its  search  for  a  new 
CEO  earlier  this  year  after  Esrey  and 
COO  Ron  LeMay  came  under  scrutiny 
by  the  IRS  for  use  of  specific  tax  shel¬ 
ters  that  saved  the  two  executives 
millions  of  dollars. 

■  Tellabs  last  week  announced  it  has 
acquired  Multi-protocol  Label  Switch¬ 
ing  edge  switch  maker  Vivace  Net¬ 
works  for  $135  million  in  cash  and 
stock.  The  deal  marks  Tellabs’  entry 
into  the  edge  router  market.  Vivace’s 
boxes  are  designed  as  IP  service- 
enablement  systems  that  retain  carri¬ 
er  investments  in  frame  relay  and 
ATM  infrastructures. 


vendor,  but  along  with  the  rest  of  the  mar¬ 
ket,  Mirror  Image  is  enhancing  its  services 
to  provide  more  than  simple  static  content 
delivery  Earlier  this  year,  the  vendor  intro¬ 
duced  RapidBuyan  offering  that  combines 
the  e-commerce  services  Mirror  Image 
acquired  through  Buyonet  with  its  tradi¬ 
tional  content  delivery  capabilities.  While 
Eriksson  wouldn’t  say  what  other  compa¬ 
nies  he  looked  at,  the  new  service  puts 
Mirror  Image  into  competition  with  com¬ 
panies  such  as  Digital  River  that  provide 
comprehensive  e-commerce  services. 

“I  wasn’t  that  familiar  with  the  benefits 
that  CDNs  could  bring,  but  now  that  I’ve 
been  exposed  to  what  Mirror  Image  can 
offer,  I’m  an  advocate  of  the  importance  of 
fast  content  deliver/  Eriksson  says.  “The 
coupling  of  CDN  technology  and  an  easy- 
to-implement  e-commerce  storefront 
allows  us  to  quickly  expand  and  grow  our 
catalog  site  without  sacrificing  the  quality 
of  our  online  transactions.” 

It’s  the  kind  of  thinking  CDN  companies 
are  hopeful  they’ll  hear  more  of  as  they 
turn  overlay  networks  originally  designed 
to  simply  deliver  static  content  into  vehi¬ 
cles  for  improving  the  performance  of  all 
sorts  of  online  initiatives. 

“It’s  amazing  how  many  people  I  talk  to 


■  BY  JIM  DUFFY 

PITTSBURGH  —  Laurel  Networks  last 
week  unveiled  software  for  its  edge  router 
that  lets  carriers  deploy  the  device  as  a 
broadband  service  delivery  system. 

The  company’s  Broadband  Remote 
Access  Server  (BRAS)  software  for  its 
ST200  router  will  pit  Laurel  against 
entrenched  broadband  aggregation  router 
vendors  such  as  Redback  Networks  and 
Juniper  Networks,  which  acquired  Red- 
back  competitor  Unisphere  Networks  a 
year  ago.  Although  Laurel  is  a  late  entrant 
to  this  market, analysts  say  there  is  demand 
for  a  high-performance  BRAS  system  such 
as  the  one  Laurel  is  proposing. 

Currently,  ST200  is  used  mainly  for 
aggregating  frame, ATM,  IP  and  other  traf¬ 
fic  types  for  passage  across  carrier  core 
networks. 

“They  already  had  all  the  ports,  they 
already  had  all  of  the  hardware,” says  Dave 


who  think  of  Akamai  as  just  caching  static 
content  at  the  edge  of  the  network,”  says 
Bobby  Blumofe,  vice  president  of  strategy 
at  Akamai.  “We’ve  had  a  whole  bunch  of 
capabilities  that  go  beyond  caching  static 
content  for  quite  a  while.” 

And  other  CDN  providers  are  following 
suit.  Business  customers  can  expect  CDN 
companies  to  beef  up  security, add  support 
for  application  processing,  link  into 
behind-the-firewall  acceleration  systems 
and  boost  storage  capabilities  at  the  edge. 
Observers  say  those  services  would  help 
drive  enterprise  network  business  to  CDN 
vendors  that  have  faced  tough  times  since 
the  dot-com  implosion  that  stripped  them 
of  their  primary  customer  base. 

Akamai  continues  to  be  saddled  with 
debt  and  has  yet  to  post  a  profit,  but  rev¬ 
enue  has  been  improving. 

At  the  same  time,  Speedera,  which  offers 
more  basic  services  at  lower  prices  than 
Akamai,  announced  last  year  it  had  be¬ 
come  operating-income  positive  and  was 
debt  free.  Cable  &  Wireless  says  its  CDN 
business,  which  it  acquired  from  Digital 
Island  in  2001,  also  has  become  profitable. 

“But  there’s  no  magic  feather;”  says  Greg 
Howard,  principal  analyst  and  founder  of 
the  HTRC  Group.  “There  are  services  these 


FORE! 

Four  of  Laurel’s  six  top  managers 
are  from  FORE  Systems,  the 
enterprise  ATM  switch  vendor 
acquired  by  GEC  in  1999. 


Passmore,  research  director  at  Burton 
Group.  “Most  of  the  BRAS  platforms  that 
are  out  there,  like  the  initial  Redback 
boxes,  were  really  based  on  PC  chassis. 
They  don’t  scale  to  the  kinds  of  band¬ 
width  requirements  in  places  like  Korea.” 

The  BRAS  software  features  a  capability 
Laurel  calls  Service  Separation  and 
Blending  (SSB).  SSB  delivers  high  band¬ 
width  per  subscriber,  advanced  quality  of 
service  (QoS),  and  integrated  routing  and 
switching  required  for  multimedia  broad¬ 
band  service. 


CDN-plus 

Here’s  a  sampling  of  what  CDN 

providers  have  in  store: 

•  More  control:  CDN  companies  such  as 
Mirror  Image  and  Speedera  plan  to  enhance 
user  interfaces  so  that  even  nontechies  can 
manage  content  sent  to  the  edge. 

•  Application  processing:  Akamai  and 
Mirror  Image  are  focusing  on  speeding  up 
application  transaction  times. 

•  Tighter  security:  Providers  are  looking 
to  make  content  even  more  secure  and  are 
talking  about  things  such  as  digital  rights 
management. 

•  Managed  enterprise  CDNs:  Cable  & 
Wireless  says  it  plans  to  manage  CDNs 
behind  the  firewall,  creating  a  private 
extension  to  its  public  CDN. 

•  Broader  storage  capabilities: 

Speedera,  for  example,  plans  to  introduce 
an  intelligent  storage  management  service 
that  will  position  hot  content  where  it’s  in 
highest  demand. 

CDNs  can  offer,  and  they’re  beginning  to.” 

Already  this  year,  the  handful  of  CDN 

companies  left  in  the  market  are  offering  a 

See  CON,  page  32 


SSB  blends  packets  from  multiple  ser¬ 
vices  downstream  over  one  broadband 
customer  connection,  while  switching 
and  routing  separate  upstream  traffic  to 
different  content  or  service  providers, 
Laurel  says.  It  does  this  through  per-ser- 
vice  queuing  and  shaping,  and  intelligent 
separation  of  packet  streams  across  multi¬ 
ple  content  networks,  the  company  says. 

ST200  supports  more  than  100,000 
broadband  sessions  with  classification,  fil¬ 
tering,  IP  VPNs,  multicast  and  QoS  features 
enabled,  Laurel  says.  The  router  supports 
more  than  500  multicast  channels. 

Integrated  ST200  per-subscriber  band¬ 
width  control  eliminates  the  need  for 
external  bandwidth  managers,  such  as 
ATM  switches;  and  the  ST200  is  the  first 
broadband  remote-access  server  with  OC- 
48  and  OC-192  uplinks,  the  firm  says. 

The  ST200  BRAS  software  is  in  trials  with 
many  service  providers,  and  general  avail¬ 
ability  is  planned  for  the  third  quarter.* 


Laurel  routes  broadband  support  to  edge 
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Service  Providers 
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EYE  ON  THE 
CARRIERS 

Johna  Till 
Johnson 


I’ve  written  a  lot  about  the  emergence 
of  extranets  and  extranet  service  pro¬ 
viders,  starting  back  when  “extranet” 
was  the  buzzword  du  jour  and  Britney 
Spears  was  the  latest  cultural  sensation. 
Now  that  extranets  seem  to  carry  the 
same  cultural  cachet  as  “Baby  One  More 
Time,”  it  might  be  a  good  idea  to  take 
another  look  at  how  they  are  evolving. 

Some  background:  In  1999,  I  made  a 
handful  of  predictions  about  the  evolu¬ 
tion  of  WAN  services,  including  frame 
relay,  ATM  and  IP  services.  Here’s  the  short 
version:  Frame  and  ATM  would  hold 
steady  through  about  2002-2003,  at  which 


The  extranet  emerges . . .  right  on  cue 


point  IP  services  would  begin  to  emerge 
as  the  dominant  next-generation  enter¬ 
prise  network.The  predominant  driver  for 
IP  services?  Extranets. 

I  even  had  a  slide  that  conveyed  these 
trends  graphically,  with  a  horizontal  time¬ 
line  showing  frame  relay  and  ATM  deploy¬ 
ments  diminishing  over  time  while  IP  ser¬ 
vices  deployments  grew  dramatically. The 
intersection  of  the  curves  occurred 
around  May  2003,  marking  an  industry 
inflection  point  labeled  “Extranets  hap¬ 
pen  here.” 

Was  I  right?  Preliminary  signs  say  yes. 
Companies  are  deploying  IP  VPNs  in 
record  numbers  —  virtually  every  organi¬ 
zation  I’ve  spoken  with  has  deployed,  or  is 
considering,  an  IP  VPN.  A  big  driver  is  the 
ability  to  gain  effective  access  to  external 
sites  and  organizations.  As  an  IT  executive 
at  a  large  information-services  firm  told 
me  recently, “More  than  50%  of  the  traffic 


on  our  WAN  is  external.  So  why  have  a 
WAN  at  all?” 

Moreover,  “resource  externalization”  is 
huge  and  getting  bigger.  In  a  recent  Ne- 
mertes  security  survey,  every  company  we 
spoke  with  reported  that  it  made  at  least 
one  type  of  resource  (files,  data,  applica¬ 
tions)  available  to  outsiders. “You  have  to 
assume  there’s  no  such  thing  as  an  inter¬ 
nal  application  anymore,”  one  IT  execu¬ 
tive  says. 

So  what  are  the  effects  for  IT  executives? 
For  starters,  companies  need  to  consider¬ 
ably  enhance  their  security  models.  The 
first  step  in  securing  most  organizations  is 
hardening  the  perimeter:  securely  locking 
down  the  firewalls,  VPNs  and  intrusion 
detection/prevention  systems  to  ensure 
that  bad  guys  stay  off  the  network. 

However,  if  the  goal  is  to  open  up  the 
organization  and  its  associated  resources 
to  third  parties,  the  notion  of  perimeter 


hardening  begins  to  lose  its  potency. 
What’s  needed  instead  is  a  more  sophisti¬ 
cated  security  architecture  that  provides 
graduated  access  to  resources  permis¬ 
sions  that  are  based  on  a  user’s  identity. 
Many  organizations  are  beginning  to  put 
into  place  a  three-tiered  security  model 
that  addresses  such  issues. 

IT  executives  also  should  also  take  a 
long  look  at  some  of  the  IP  VPN  services 
that  are  emerging, as  I  discussed  in  my  last 
column.  Many  include  extranet  capabili¬ 
ties  already,  or  can  be  customized  to  pro¬ 
vide  secure  third-party  access.  The  up¬ 
shot?  Like  a  certain  bellybutton-baring 
diva,  extranets  are,  “Stronger  than  yester¬ 
day  —  now  it’s  nothing  but  my  way’ 

Johnson  is  president  and  chief  research 
officer  at  Nemertes  Research,  an  indepen¬ 
dent  technology  research  firm.  She  can  be 
reached  at  johna@nemertes.com. 


CDN 

continued  from  page  31  ' 

number  of  new  services.  The 
point  is  that  the  same  technology 
that  made  the  Internet  friendlier 
for  static  Web  site  content  can  do 
the  same  for  more  critical  busi¬ 
ness  content  and  applications, 
analysts  say. 

For  example,  Mirror  Image  has 
its  e-commerce  offering  and 
recently  unveiled  a  dynamic  con¬ 
tent  service.  Speedera  introduced 


a  new  security  service  to  let  Web 
site  administrators  control  who 
can  upload  content  to  the  CDN; 
and  Akamai,  in  partnership  with 
IBM,  rolled  out  its  first  service  to 
support  application  processing  at 
the  edge. 

More  services  are  coming. 
Mirror  Image  talks  about  support¬ 
ing  digital-rights  management 
and  live  video.  Speedera  says  bet¬ 
ter  monitoring  and  reporting  ser¬ 
vices  will  be  offered  to  make  it 
easier  to  track  who’s  accessing 


content  and  from  where,  and  also 
plans  to  boost  its  storage  capabili¬ 
ties  with  an  intelligent  storage 
management  service.  Akamai  says 
it  will  continue  to  focus  on  push¬ 
ing  Web  applications  out  to  its  dis¬ 
tributed  network. 

C&W  meanwhile,  is  taking  ad¬ 
vantage  of  its  depth  as  a  network 
and  hosting  provider  and  is  mak¬ 
ing  a  multimillion-dollar  invest¬ 
ment  to  expand  the  capacity  of  its 
CDN  as  traffic  on  that  network 
increases,  thanks  in  large  part  to 


the  tight  integration  with  C&W’s 
other  offerings. 

That  integration  is  what  at¬ 
tracted  Major  League  Baseball  to 
C&W’s  CDN  services,  says  Joe 
Choti.MLB.com’s  CTO. 

“It’s  nice  that  I  can  ride  in  a 
[C&W]  data  center,  and  then  out 
the  back  door  of  that  data  center  I 
get  right  on  the  [C&W]  CDN,”  he 
says.“When  there  are  issues,  I’ve  got 
one  point  of  contact  I  can  call.” 

One  point  of  contact  was  also 
important  for  GBL’s  Eriksson. 


“It  becomes  costly  when  you 
have  to  outsource  different  tech¬ 
nical  components  of  the  store¬ 
front  to  different  vendors,”  Eriks¬ 
son  says. 

The  bottom  line  for  both  Choti 
and  Eriksson,  though,  was  that 
the  CDN  provider  could  handle 
spikes  in  traffic,  eliminating  the 
need  to  have  idle  hardware  and 
bandwidth  standing  by  in  case  of 
spikes  in  traffic.  It’s  what  CDNs 
have  been  all  about  from  the 
beginning.  ■ 


You  Need  Belden’s  New  DataTwist  600e  — 

The  Only  Network  Cable  That  Guarantees  Performance  Beyond  Category  6  Standards. 

Suddenly,  as  quickly  as  Category  6  cable  performance  standards  have  been  adopted.  Belden 
has  made  them  obsolete.  DataTwist  600e  UTP  networking  cable  was  developed  not  only  to  meet 
Category  6  standards,  but  also  to  provide  significant  amounts  of  headroom  above  and  beyond 
them  —  guaranteed.  It’s  the  industry’s  only  UTP  cable  with  guaranteed  performance  to  600  MHz. 

The  secret?  Belden’s  unique,  patented  Bonded-Pair  technology  that  ensures  uniform  conductor- 
to-conductor  spacing  to  eliminate  performance-robbing  gaps  between  pairs. ..coupled  with 
the  patented  e-Spline  design  that  provides  consistent  pair-to-pair  spacing 


•  Nearly  5  dB  of  return  loss  improvement  over  Category  6 
at  100  MHz  —  guaranteed. 

•  An  attenuation  margin  over  Category  6  standards  —  guaranteed. 

•  Positive  Power  Sum  ACR  to  460  MHz  —  guaranteed. 

■■■ 

All  of  which  means  better  and  faster  performance  for  you. 

For  more  information  call  1-800-BELDEN-4  to  get  your 
FREE  copy  of  the  DataTwist  600e  New  Product  Bulletin. 

www.  belden. com/DT600eNW.pdf 


DuPont  is  the  sole 
supplier  ot  FEP  Teflon 
insulation  material  used 
in  the  plenum  product. 
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Performance  Delivers  The  Future 
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Needs  to  optimize  the  network  on  a  budget. 
Needs  to  plan  for  the  future.  |j 

Needs  choices. 


Building  better  networks 
today  and  tomorrow. 

Help  lower  your  organization's  operational  and  IT 
maintenance  costs,  and  improve  productivity 
with  3Com  networking  solutions.  3Com  gives 
you  a  choice  in  voice  and  data  networking 
technologies,  wired  or  wireless,  modular 
or  stackable.  Whatever  your  networking 
environment,  3Com  offers  high  performance, 
practical-to-use,  innovative,  cost-effective 
enterprise  solutions  that  can  be  customized  to 
meet  your  current  and  future  business  needs. 

•  Build  a  distributed  core  network  that  allows 
you  to  incrementally  add  value  to  your 
infrastructure  one  piece  at  a  time  so  you  can 
avoid  getting  locked  into  an  expensive  chassis- 
based  system  that  doesn't  fit  your  current  needs. 

•  Deploy  solid  network  security  that  includes 
hardware  firewalls  for  individual  laptops  and 
desktops,  and  provides  hardcore  solutions  for  the 
rest  of  your  network. 

•  Revolutionize  your  organization's  infrastructure 
with  IP  Telephony  for  maximum  economic  and 
resource  efficiency. 

•  Help  improve  productivity  with  a  wireless 
network  that  encompasses  WLAN  and 
Bluetooth. 

3Com  offers  compelling  networking  solutions  for 
education,  state  and  local  governments, 
and  businesses. 


Visit  www.3com.com/needs3com10 
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Network  Jack 


Mobility  &  Wireless 


Security  Solutions 


Networked  Telephony 


3Com 

Possible  made  practical" 


©  2003,  3Com  Corporation,  all  nghts  reserved  3Com.  and  the  3Com  logo  are  registered  trademarks,  and  Possible  made  practical  is  a  trademark  of  3Com  Corporation. 


Sure,  if  you’re  in  a  hot  spot,  then  Wi-Fi  can  give 


you  wireless  access.  But  what  about  the  millions 


of  places  where  it  can’t?  Fortunately,  the  one  spot 


where  you  can  find  all  the  answers  is  on  our 


website.  We’ll  show  you  how  CDMA2000  gives 


CDMA2000:  HOT  FROM  SEA  TO  SHINING  SEA. 


you  always-on  remote  access  in  a  protected 


environment  at  speeds  faster  than  dial-up.  Best 


of  all,  CDMA2000  delivers  anywhere  that  your 


wireless  carrier  has  coverage,  across  the  entire 


country.  Plus,  you  won’t  have  to  fill  up  on  double 


lattes  while  accessing  your  network.  To  learn 


more,  visit  us  at  www.qualcomm.com/enterprise. 


Qualcomm 
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Real  Worid  Storage  Management  Leam  to  automate  storage 
provisioning,  centralize  policy-based  infrastructure  management 
and  encrypt  data  to  prevent  unintentional  loss  and  compromise. 
Storage  Expert  ’.  Curtis  Presto  will  provide  an  industry 
overview  laying  the  groundwork  for  sponsor  case  s  and 
technology  updates  from  Quantum,  CA,  QLogic  and  other 
storage  companies.  Attendees  will  participate  in  interactive 
workshops  using  technologies  discussed. 


Who  should  attend  this  FREE  seminar? 


IT  professionals  responsible  for  ensuring  data  availability 
and  for  implementing  enterprise  storage  strategies 
Those  who  influence  and  make  critical  technology  decisions 
for  their  company 

Professionals  who  know  that  smart  technology  decisions 
require  the  best  technology  partners 


Copses  cf  Mr.  Preston's  O'Reilly  books:  Using 

\  ,,cMJi 

£4 P's  and  NAS  as  well  as  Unix  Backup  and 
x* -caver?  will  be  raffled  off  to  those  who  are 
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For  more  detailed  information  visit  our  website  at 

www.NetworkStoragell.com 
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■  AN  INSIDE  LOOK  AT  THE 
TECHNOLOGIES  AND  STANDARDS 
SHAPING  YOUR  NETWORK 


Proxy  system  streamlines  Web  requests 


HOW  IT  WORKS 


Web-resource  mapping 


Proxies  often  cause  URL  requests  to  fail  outside  the 
firewall.  A  new  technology  called  Web-resource  mapping 
fixes  the  problem  by  dynamically  rewriting  URLs  to  the 
correct  form. 

0  Server  responds  with  content, 


©User  requests  https://www. 
example.com/  and  proxy 
forwards  it  to  server. 


which  includes  the  link  http:// 
server.example.com/images/ 
logojpg.  Proxy  rewrites 
response  and  sends  to  user. 


•User  requests  https://www.example.com/prx/ooo/http/ 
server.example.com/images/logojpg.  Server  receives  request 
for  http://server.example.com/images/logojpg  and  responds 
with  correct  content. 


■  BY  STEVE  SHAH 

Proxies  have  been  longtime  friends  and 
foes  of  Web  servers.  On  one  hand,  proxies 
offer  protection,  caching,  Secure  Sockets 
Layer  acceleration,  compression  and 
authentication.  The  downside,  though,  is 
that  many  Web  sites  and  applications 
don’t  work  with  proxies. 

Web-resource  mapping,  a  new  technol¬ 
ogy  embedded  in  SSL  VPN  proxies, 
dynamically  rewrites  URLs  so  IT  managers 
don’t  need  to  alter  applications  to  work 
outside  their  firewalls. 

The  proxy  problem 

When  a  Web  site  sends  a  page  to  a  user, 
it  typically  includes  a  variety  of  embed¬ 
ded  references  to  other  objects  on  the 
Web  site.  If  the  references  are  relative, 
meaning  that  they  don’t  include  the  name 
of  the  server  within  them  (/content. html) 
rather  than  absolute  (http://www.example 
.com/content.html),  there  is  no  problem. 
However,  most  Web  sites  do  embed 
absolute  links. 

Two  problems  arise.  The  first  frequently 
occurs  in  situations  where  a  proxy  also  is 
performing  SSL  acceleration.  When  links 
embedded  in  the  document  are  prefixed 
with  “http”  instead  of  “https,”  users’  clicks 
are  made  to  the  unencrypted  pages 
where  URLs  are  sometimes  delivered 
without  question  or  just  don't  work. 

The  second  problem  occurs  when  a 
proxy’s  domain  name  is  different  from  the 
server’s  name  —  for  example,  a  server 
named  server.example.com  and  a  proxy 
called  www.example.com.  Applications 
that  look  to  the  host  name  might  end  up 
embedding  links  such  as  http://server. 
example.com/content.html  when  they 


should  say  http://www.example.com/ 
content.html. 

The  presence  of  JavaScript  and  HTTP 
cookies  often  exacerbates  the  problem. 
JavaScript-driven  pages  often  dynamically 
assemble  URLs  on  the  client  side,  and  the 
HTTP  cookies  are  sent  from  the  server 
such  that  the  client  will  only  send  them 
back  when  communicating  with  the  ser¬ 
ver  and  not  through  a  proxy. 

In  most  cases,  site  administrators  lack 
the  time,  money  and  resources  to  make 
the  significant  and  necessary  changes  to 


applications  to  fix  a  problem.  Instead, 
what  is  needed  is  a  mapping  of  incorrect 
URLs  to  the  correct  form.  The  mapping 
has  to  happen  for  links  being  sent  from 
the  server  to  the  client  and  for  HTTP 
requests  from  the  client  to  the  server. 

Web-resource  mapping  dynamically  re¬ 
writes  URLs  embedded  within  HTML, 
DHTML,  XHTML,  Cascading  Style  Sheets, 
JavaScript,  HTTP  cookies  and  Flash.  This 
causes  links  that  once  appeared  as 
http://intranet.company.com/content. 
html  to  now  appear  as  https://proxy. 


company.  com/prx/OOO/htt  p/intranet, 
companycom/content.html. 

While  this  might  seem  to  be  a  simple 
case  of  “search  and  replace,”  it  is  a  more 
complex  task  because  HTML  standards 
are  rarely  followed  and  JavaScript  cannot 
be  altered  in  an  ad  hoc  manner.  Java¬ 
Script  in  particular  poses  great  challenges 
because  the  code  must  remain  syntacti¬ 
cally  and  semantically  correct. 

Another  key  role  of  Web-resource  map¬ 
ping  is  to  force  SSL  onto  applications  that 
could  not  otherwise  support  it,  or  do  so  in 
an  incomplete  manner.  This  is  accom¬ 
plished  by  rewriting  each  link  so  that  it 
must  use  SSL  for  all  transactions,  such  as 
starting  all  links  with  “https”  instead  of 
“http.” 

Ideally,  Web-resource  mapping  is  per¬ 
formed  inside  the  proxy  server  sitting 
between  a  client  and  server.  The  proxy 
simply  can  sit  in  front  of  application  and 
Web  servers  and  transmit  their  requests. 
When  the  proxy  receives  an  HTTP  re¬ 
quest,  it  parses  the  modified  URL,  rewrites 
it  to  agree  with  what  the  origin  server 
expects  and  finally  passes  it  back  to  the 
server  so  the  server  doesn’t  realize  that  the 
content  was  modified  in  any  way. 

IT  departments  supporting  applications 
that  go  through  a  proxy  performing  Web- 
resource  mapping  benefit  from  central¬ 
ized  authentication,  authorization  and 
accounting.  Regardless  of  which  server 
sends  the  content,  all  requests  for  content 
go  back  through  the  proxy.  And  if  the 
proxy  is  using  SSL  for  all  the  links,  the  data 
flow  is  guaranteed  to  be  secured. 

Shah  is  director  of  product  management 
at  Array  Networks.  He  can  be  reached  at 
sshah  @array networks,  net. 


Dr.  Internet 


By  Steve  Blass 


We  have  two  PCs  running  Windows  2000  connected 
to  a  switch.  We  connect  the  broadband  link  to  the 
same  switch,  but  we  can  only  have  one  computer 
connected  to  the  Internet  and  cannot  use  Windows 
networking  to  communicate  with  the  other  PC.  The 
ISP  allows  for  only  one  IP  address  to  be  allocated 
dynamically  from  its  Dynamic  Host  Configuration 
Protocol  server.  Either  PC  can  be  connected,  as 
long  as  we  first  release  the  IP  address.  Is  there  a 
different  way  of  solving  this  problem?  We've 


thought  about  forcing  both  computers  to  use  the 
same  media  access  control  address,  but  don’t 
know  what  the  consequences  would  be. 

The  solution  is  not  duplicating  the  MAC 
addresses.  Hide  your  LAN  behind  a  gateway 
that  provides  network  address  translation  (NAT) 
and  routing  services  for  your  LAN’s  Internet 
connection.  It’s  possible  to  configure  Routing 
and  Remote  Access  Services  on  one  of  the 


Windows  2000  PCs  to  provide  these  services  for 
the  other  PC  using  Internet  Connection  Sharing 
or  NAT.  See  www.nwfusion.com,  DocFinder: 
5934,  for  instructions.  It  would  be  easier  to  buy 
a  small  broadband  router  to  place  between  your 
switch  and  the  ISP  connection. 

Blass  is  a  network  architect  at  Change@Work  in 
Houston.  He  can  be  reached  at  dr.internet@changecit 
work.com. 
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GEARHEAO 
INSIDE  THE 
NETWORK 
MACHINE 

Mark 

Gibbs 


We  set  out  last  week  to  look  at  a 
ser-ver-automation  package  before 
we  got  distracted  by  a  cool  remote- 
control  tool.  But  now  we’re  back  and  ready 
to  explore  ActiveBatch  from  Advanced 
Systems  Concepts  (www.advsyscon.com). 

Over  the  last  few  months  we’ve  reviewed 
several  automation  products,  but  Active- 
Batch  is  different.  First,  it  only  runs  jobs  — 
batch  files  or  executables;  it  doesn’t  pro¬ 
vide  generalized  programmatic  building 
blocks,  as  others  do. Second,  it  can  execute 
jobs  on  Windows,  Linux,  Unix  and  Open- 
VMS.  Third,  it  can  coordinate  jobs  across 
platforms. 

Under  ActiveBatch,  jobs  can  be  as  simple 
or  as  complicated  as  required.They  can  be 
chained  together,  with  the  success  or  fail¬ 
ure  of  the  individual  jobs  determining  the 
success  or  failure  of  the  chain. 

You  can  schedule  jobs  by  date  and  time, 
system  events  and  application  events.They 
also  can  be  defined  for  execution  on  a  spe¬ 
cific  machine  or  class  of  machines,  exe¬ 


cuted  on  a  virtual  machine  that  is  based  on 
workload  or  other  criteria,  and  complete 
audit  trails  of  the  submitted  job, including  a 
log  of  the  output  of  the  job,  can  be  created. 
Finally,  you  can  define  alerts  and  notifica¬ 
tions  to  monitor  and  report  on  job  status. 

The  documentation  —  a  435-page  PDF 
—  is  excellent. 

ActiveBatch  has  three  components  — 
clients,  job  schedulers  and  execution 
engines.  The  clients  run  only  under  Win¬ 
dows  and  provide  the  user  interface  to 
manage  the  job  schedulers,  which  also  run 
only  under  Windows.The  job  schedulers,  in 
turn,  drive  the  execution  engines,  which 
run  on  all  versions  of  Windows  .Net;  Open- 
VMS  Version  7.1  or  later;  Compaq  Tru64 
Version  4  or  later;  Sun  Solaris  (SPARC) 
Version  6  or  later;  HP-UX  Version  1 1  or  later; 
and  IBM-AIX  Version  4.3  or  later. 

The  job  schedulers,  which  run  as  Win¬ 
dows  system  services,  keep  track  of  all  jobs, 
and  determine  when  and  where  a  job  has 
to  execute.  Underlying  the  job  schedulers 
is  a  database.  You  can  use  Microsoft  SQL 
Server,  Oracle  or  other  databases  compli¬ 
ant  with  Open  Database  Connectivity  If  you 
don’t  have  a  suitable  database  installed, 
Advanced  Systems  Concepts  can  provide 
you  with  Microsoft  SQL  Server  Desktop 
Engine  for  no  additional  licensing  fee. 


The  client  can  be  a  GUI  application  or  a 
command-line  interface.  Also,  ActiveBatch 
is  based  on  Microsoft’s  Component  Object 
Model,  so  object-oriented  scripting  lan¬ 
guages  can  directly  access  ActiveBatch’s 
objects,  properties  and  methods.There  also 
is  a  Microsoft  Management  Console  snap- 
in  for  managing  security  policies  that  apply 
to  every  aspect  of  running  jobs. 

The  client  interface  is  reminiscent  of 
Microsoft  Outlook’s,  with  a  list  of  views  in  a 
toolbar  down  the  left-hand  side.  There  are 
five  views:  ActiveBatch  Neighborhood, 
Runbook,  Reporting  Facility  Relationship 
Editor  and  System  View. 

ActiveBatch  Neighborhood  is  an  inter¬ 
face  for  managing  all  the  objects  in  the 
ActiveBatch  system  —  servers,  queues,  exe¬ 
cution  agents  and  jobs. 

The  Runbook  is  a  calendar-style  summary 
of  jobs  that  have  been  run  and  those  that 
are  to  be  run  —  color-coded  according  to 
status. You  can  choose  a  specific  day  from 
the  calendar  panel  or  working  week  (Mon¬ 
day  to  Friday)  or  complete  week  view. 
Clicking  on  a  job  displays  its  properties  in 
the  panel  under  the  calendar. 

The  Reporting  Facility  pops  up  a  report¬ 
ing  interface  that  generates  HTML-tem- 
plated  reports.The  Relationship  Editor  lets 
you  visually  define  relationships  between 


jobs.The  System  View  is  a  real-time  display 
that  shows  which  jobs  are  running  and 
the  interactions  between  job  streams. 

ActiveBatch  supports  Windows  Manage 
ment  Instrumentation  (WMI),  which  is 
Microsoft’s  take  on  the  Distributed  Man¬ 
agement  Task  Force’s  Web-Based  Enter¬ 
prise  Management  standard.  WMI  lets  Ac¬ 
tiveBatch  use  any  of  the  thousands  of  sys¬ 
tem  and  software  events  as  Event  Triggers 
to  start, stop  or  modify  job  execution. 

This  is  a  very  complex  product.  You  can 
think  of  it  as  the  Windows  scheduler  on 
steroids.  It  can  be  used  to  create  complex 
job  execution  and  management  systems 
that  are  superbly  integrated  with  Windows, 
as  well  as  executing  and  managing  jobs  on 
the  other  supported  platforms. 

ActiveBatch  comes  in  three  versions: 
Standard  for  NT  Server,  2000  Server  or  2003 
Standard  Server;  Enterprise  for  NT  Server, 
2000  Advanced  Server  or  2003  Enterprise 
Server;  and  DataCenter  for  2000  Data- 
Center  Server  or  2003  DataCenter  Server 
(cluster  failover  is  available  on  the  Enter¬ 
prise  and  Datacenter  editions). 

There  is  an  optional  Web  interface  and 
support  for  BlackBerry  devices  for  man¬ 
agement.  Pricing  starts  at  $1,500. 

Submit  your  job  to  gearhead@gibbs.com. 


Cool 

Quick  takes 
on  high-tech  toys 

By  Keith  Shaw 


A  few  weeks  ago  we  looked  at  the  Palm  Zire  71,  one  of 
two  new  PDAs  Palm  launched  recently. The  Zire  71’s 
cool  camera,  color  screen,  MP3  player  and  digital 
video  player  make  it  a  multimedia  lover’s  dream. 

But  this  is  Network  World ,  where  we  get  turned  on  by 
network  connectivity.  For  that  we  needed  to  test  the  other 
new  Palm  PDA,  the  Tungsten  C  (available  for  $499). The 
device  includes  integrated  802.11b  (Wi-Fi)  wireless  LAN 
connectivity  and  an  embedded  keyboard  for  users  who 
prefer  to  type  out  their  long  e-mails  or  notes  instead  of 
using  an  add-on  keyboard  or  Graffiti.  It  also  has  a  great 
color  screen,  with  a  320-by-320-pixel  resolution  that  only 
Sony  CL1E  fans  have  enjoyed  until  now.  High-end  Palm 
users  who  haven’t  yet  flocked  to  the  Sony  camp  now  have 
a  reason  to  stay  with  Palm  for  a  while  (or  at  least  include 
Palm  on  their  short  lists  of  devices  to  buy). 

We’ve  often  been  disappointed  with  PDAs  that  have  a 
hard  time  achieving  a  good  and  fast  network  connection. 
Devices  that  connect  to  a  wide-area  wireless  network 
(including  Palm’s  Tungsten  W)  have  done  an  OK  job,  but 
the  unreliability  of  decent  network  speeds  (and  cost) 
have  turned  us  off.  Devices  such  as  the  BlackBerry  are 
good  at  connecting  with  a  WAN,  but  only  because  they 
transmit  and  receive  small  amounts  of  data  (such  as 
e-mail). 

For  a  good,  mobile  Web  experience, you  need  a  faster 
and  more  reliable  connection. That’s  where  Wi-Fi  comes 
in  As  public  hot  spots  and  home  wireless  networks 


Surfing  with  the  Palm  Tungsten  G 


have  sprung  up  around  the  world, Wi-Fi  has 
provided  users  with  a  better  connection 
(up  to  1 1 M  bit/sec  to  a  broadband  or 
T-l  back  end). When  using  this  connec¬ 
tion  at  work  or  home,  it’s  a  lot  less 
expensive  than  connecting  via  a 
wireless  WAN. 

Other  devices  we’ve  tried  have  had 
Wi-Fi  capabilities,  most  notably  on 
the  Pocket  PC  front.  But  trying  to 
configure  the  device  to  find  and 
connect  to  a  Wi-Fi  network  has 
been  beyond  painful. 

The  great  thing  about  the 
Tungsten  C  is  that  connecting 
to  a  Wi-Fi  network  takes 
fewer  than  four  steps. 

Clicking  on  the  “Wi-Fi 
Setup”  icon  brings  you  to  a 
wizard  that  scans  for  avail¬ 
able  Wi-Fi  networks.  If  there 
are  any  around,  the  user 
just  clicks  on  the  network 
name  and  the  device  tries 
to  connect.  A  VPN  set-up 
screen  also  is  available  for 
users  who  want  to  connect  securely.  If  a  network  is  not 
broadcasting  and  a  user  knows  the  network’s  Service  Set 
Identifier,  he  also  can  enter  it  under  an  advanced  setting. 
Connecting  to  an  existing  Wi-Fi  network  doesn’t  get  any 
easier  than  this.  Palm  gets  a  standing  ovation  for  making 
setup  easier  for  users. 

Once  connected,  users  can  open  up  the  browser  with 
the  Web  icon  and  begin  Internet  surfing.  On  this  front 


1  was  a  bit  disap¬ 
pointed,  as  the  expe¬ 
rience  was  too  hit- 
or-miss. 

During  some  tests,  I 
could  connect  imme¬ 
diately  and  content 
flowed  into  the  device 
like  an  outdoor  spigot 
filling  a  water  balloon. 
Other  times,  the  content 
slowed  to  a  trickle.  It  some¬ 
times  appeared  that  the 
browser  was  frozen  while  it 
was  downloading  or  waiting 
for  the  content.  While  the  con¬ 
tent  appears  in  HTML  and  gives 
the  experience  of  surfing  on  a 
PC  (the  fonts  and  pictures  all 
match  better  than  in  previous 
browsers),  the  small  size  of  the  dis¬ 
play  still  requires  a  user  to  scroll 
left  and  right  in  addition  to  up 
and  down. 

If  the  integrated  Wi-Fi  is  your  main 
reason  for  buying  a  Tungsten  C,  we 
suggest  you  look  into  third-party  Web  browsers  (keep 
your  fingers  crossed  that  Bitstream  will  make  a  version 
of  its  ThunderHawk  browser  for  the  Palm).  For  others, 
the  Tungsten  C’s  features  (fast  processor,  color  screen, 
embedded  keyboard)  should  make  worth  a  look  when 
making  a  PDA  buying  decision. 

Shaw  can  be  reached  at  kshaw@nww.com. 
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Inbox  I 


Mary  Dorsey 
Need  presentation 
Chris  Escobar 
lunch  on  friday 
£3  Tona  Hess 
FY04  Sales  Forecast 
Minnie  Lee 

Q4resu!ts  g, 

Paul  Osborne  12/19  §  I 

Wate  for  tomorrows  schedule  jjl 
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Downloading  e-mail  becomes  easier  with  the  Wi-Fi 
enabled  Tungsten  C. 


At  CDW,  we  know  that  every  day,  you're  asked  to  do  the  impossible. 


That's  why  we  offer  you  so  many  ways  to  make  buying  technology 


simple.  From  personal  account  managers  to  custom  configuration, 


you  can  count  on  us  for  brand  name  products,  the  way  you  need 

.  v 

them,  when  you  need  them.  To  learn  more,  call  or  visit  us  online. 
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EDITORIAL 

John  Dix 

Big  dogs  give 
lowdown  on 
top  trends 

I  T  spending  won't  ratchet  up  in  the  second  half  and 
companies  are  more  cost-conscious  than  ever,  but 
buyers  are  calling  the  shots  and  can  get  important 
concessions  from  suppliers. 

These  were  a  few  of  the  conclusions  outlined  in  a  sum¬ 
mary  of  a  panel  discussion  that  Goldman  Sachs  Global 
Equity  Research  conducted  with  CIOs  from  Fidelity  Invest¬ 
ments,  Procter  &  Gamble,  SBC  and  its  own  company. 

While  the  findings  obviously  cannot  be  projected,  when 
CIOs  from  huge  companies  talk,  people  listen. 

As  a  group,  the  CIOs  said  they  don’t  see  spending 
increasing  in  the  second  half,  as  some  industry  observers 
have  anticipated.  But  they  emphasized  how  buyers  hold 
all  the  cards. 

“We  were  struck  by  the  almost-combative  stance  our 
CIOs  took  vis-a-vis  vendor’s  traditional  sales  and  pricing 
tactics,”  Goldman  Sachs  reported. “Our  panel  communi¬ 
cated  a  fierce  determination  to  put  greater  scrutiny  on 
purchases,  squeeze  maintenance  dollars,  get  higher 
returns  on  their  investments  and  eliminate  unproductive 
time  spent  with  too  many  vendors.” 

In  particular,  CIOs  are  getting  fed  up  with  software  ven- 
dors.They  want  products  that  don’t  lock  them  in,  better 
ROI  and  sweeter  support  deals.  One  of  the  clubs  they  are 
wielding  in  this  battle  is  open  source  software,  although 
the  Wall  Street  firms  on  the  panel  were  further  along  in 
using  Linux  than  the  others. 

On  the  server  front.  Goldman  Sachs  said  the  CIOs  were 
bullish  about  “moving  aggressively  toward  Intel-based 
four-  and  eight-way  servers  and  blade  racks  . . .  mostly  at 
the  expense  of  proprietary”  boxes  such  as  those  from  Sun. 
None  of  them,  however,  appear  to  be  wowed  by  Intel's  64- 
bit  Itanium  processor, saying  there  isn’t  much  need  for  it. 

In  terms  of  PCs,  Goldman  Sachs  said  the  CIOs  have 
stretched  desktop  replacement  out  to  four  years  and  are 
cycling  laptops  every  two  to  three  years. 

On  both  the  software  and  hardware  fronts,  the  CIOs 
expressed  a  healthy  appetite  for  commodity,  standards- 
based  offerings.“Our  CIOs  showed  consistent  aversion  to 
all  things  proprietary  and  enthusiasm  for  standards  such 
as  Linux  and  XML,  as  well  as  open  APIs  and  standard 
messaging," Goldman  Sachs  reported. 

Regarding  two  technologies  generating  a  lot  of  buzz: 
Three  of  the  four  CIOs  are  testing  voice  over  IP  but  none 
of  them  see  a  great  enough  “cost/benefit  ...  to  spur  enter¬ 
prisewide  use”;  and  ail  of  them  seem  to  be  brushing 
aside  on-demand  computing  as  hype. 

One  of  the  main  take-aways  seems  to  be:  Given  the 
current  market  conditions, you  buyers  are  in  charge. 
Demand  more. 

—  John  Dix 
Editor  in  chief 
jdix@nww.com 
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Unpatchable  problem 


I  have  a  problem  with  the  way  you  describe  the 
tests  against  the  Unix/Apache  machines  in  your 
story  “Be  the  hacker”  (www.nwfusion.com,  Doc- 
Finder:  5923).You  infer  that  they’re  just  as  insecure 
as  Microsoft  Internet  Information  Server,  but  in  real¬ 
ity  they’re  not.The  problem,  in  this  case,  is  not  inher¬ 
ent  in  Apache  or  Unix  systems,  but  in  the  Perl  script. 
Just  move  the  Perl  script  over  to  the  IIS  system,  and 
the  same  vulnerability  will  migrate.  The  exploits 
you  discussed  with  IIS  can  be  fixed  with  a  patch;  a 
patch  won’t  work  on  the  Apache/Unix  side 
because  the  problem  isn’t  with  the  server  software. 

Russell  Handorf 
CIO 

ClosedNetworks 

Philadelphia 


The  middle  road 


Regarding  Mark  Gibbs’  Backspin  column  “Re- 
strategizing  support”  (DocFinder:  5924):  My  com¬ 
pany  has  taken  a  middle  road  that  is  really  not  a  mid¬ 
dle  road  at  all,  but  a  combination  of  the  two 
extremes.  We  have  office  staff  with  little  to  no  com¬ 
puter  skills  beyond  how  to  use  a  mouse;  we  also 
have  technical  staff  with  a  high  degree  of  experi¬ 
ence.  We  have  a  standard,  supported  configuration, 
which  everyone  starts  with. The  staffers  who  are  not 
very  computer  literate  do  not  make  any  substantive 
changes,  and  we  have  very  few  system-level  help 
calls  from  them.The  technically  savvy  staffers,  on  the 
other  hand,  often  make  major  changes  to  their  sys¬ 
tems,  and  as  long  as  they  don’t  violate  security  pol¬ 
icy  and  don’t  cry  for  help  when  they  break  some¬ 
thing,  they  are  free  to  do  so.  This  has  enabled  us  to 
provide  the  best  of  both  worlds:  reliable,  standard 
systems  for  those  who  need  them,  and  wildly  con- 

E-mail  letters  to  jdix@nwtv.com  or  send  them  to  John  Dix.  editor  in 
chief,  Network  World,  1 18  Turnpike  Road,  Southborough,  MA  01 772. 
Please  include  phone  number  and  address  for  veriPication. 


figurable  systems  for  those  who  need  them. 
Admittedly,  we  are  a  technology  company  and  are 
fairly  small,  but  this  works  well  for  us  and  has  mini¬ 
mized  IT  support  costs. 


Paul  Kraus 
Systems  architect 
Information  Management  Group 
Albany,  N.Y 


A  cheaper  solution 


Joel  Snyder’s  column  “Risk  analysis  needs  a  reality 
check”  (DocFinder:  5925)  hits  the  nail  on  the  head. 
Installing  security  measures  without  a  risk  assess¬ 
ment  and  ROI  analysis  is  throwing  money  out  the 
window.  What  we  should  look  for  is  $10  solutions  to 
million-dollar  problems,  not  the  other  way  around. 

Robert  Jacobson 
President 

International  Security  Technology 
New  York 

Not  necessarily  best 

In  the  story  “WorldCom  unveils  new  name,  services” 
(DocFinder:  5926),  David  Willis,  vice  president  of 
infrastructure  strategies  at  Meta  Group, states: “[MCI 
has]  the  best  public  IP  network  in  UUNET,  which  is 
now  the  core  of  the  company’  I  have  a  couple  of 
comments  on  this  quote. 

First, biggest  doesn’t  always  mean  best.  MCI’s  IP  net¬ 
work  (UUNET)  doesn’t  run  at  the  same  high  speed 
as  other  carriers’  networks,  such  as  Qwest’s.  Qwest’s 
network  is  fully  meshed  OC-192c,  while  the  best  that 
MCI  can  boast  is  a  few  OC-192c  long-haul  links. 
Second,  because  MCI’s  network  isn’t  as  fast  and  car¬ 
ries  so  much  traffic,  MCI’s  network  runs  at  much 
higher  degrees  of  congestion  than  other  carriers’. 

If  I  were  to  choose  a  carrier  based  solely  on  the 
state  of  its  IP  network,  I  can’t  say  that  MCI  would  be 
my  first  choice. 

Matthew  Spool 
New  York 


More  online!  www.nwfusion.com  Find  out  what  readers  are  saying  about  these  and  other  topics.  DocFinder  5921 
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PACKET  EVANGELIST 

Steven  Taylor 

AT&T’s  recent  announcement  that  it  has 
certified  Avaya  and  Cisco  IP  PBXs  for 
interoperability  with  its  voice-over-IP 
services  has  some  huge  implications.  First, 
the  move  officially  starts  to  bridge  the  gap 
between  VoIP  in  the  LAN  and  in  the  WAN, 
explicitly  moving  WAN-based  VoIP  beyond 
simple  toll  bypass.  Second,  it  enhances  the  legitimacy  of  VoIP  and 
moves  the  IP  PBX  in  particular  and  the  VoIP  market  in  general  from 
a  niche  to  the  mainstream.  And  it  also  opens  up  a  world  of  new“chal- 
lenges,”to  use  the  common  marketing  euphemism  for  problems.  (For 
details  on  the  announcement,  see  the  newsletters  at  www.nwfu 
sion.com,  DocFinder:  5847  and  DocFinder;5848). 

The  greatest  challenge  for  global  voice  network  interoperability  is 
making  the  transition  from  the  traditional  public  switched  telephone 
network  (PSTN)  to  an  IP-based  network. Today,  using  the  PSTN,  you 
can  call  anybody,  anywhere,  anytime.  Someday  we’ll  be  there  with 
VoIP  services  as  well,  but  making  that  transition  as  effective  and  effi¬ 
cient  as  possible  just  isn’t  here  yet. 

Let’s  take  the  AT&T  VoIP  service  as  an  example.  Site-to-site  calls 
within  a  corporation  are  a  piece  of  cake  if  you  don’t  leave  the  AT&T 
service.  Making  all-IP  voice  calls  to  a  business  partner  also  on  the 
AT&T  network,  and  calling  from  the  AT&T  VoIP  service  to  a  PSTN 
location,  also  are  relatively  easy. 

Unfortunately  that’s  where  the  simplicity  ends.  What  happens  if  you 
want  to  call  a  business  partner  who  uses  MCI,  Sprint  or  some  other 
service  provider  for  his  internal  network?  On  the  one  hand, you  could 


A  VoIP  NNI:  The  next  frontier 


use  specialized  firewall  gear  that  understands  VoIP  and  use  the 
Internet  for  transport.  But  there  are  numerous  other  issues,  from  secu¬ 
rity  to  quality  of  service,  involved  with  using  the  Internet  for  this  task. 

At  the  other  extreme,  the  call  could  be  handed  off  to  the  PSTN  for 
switching  and  then  re-enter  the  IP  realm.  However,  this  is  at  best  a 
stopgap. 

What  we  need  is  true  service  interworking  —  a  Network-to-Network 
Interface  (NNI)  for  VoIP.  And  we’ve  been  here  before.  In  the  early 
days  of  frame  relay  and  ATM,  the  networks  were  VPNs  in  the  truest 
sense. You  had  connectivity  only  to  other  points  on  your  private  net¬ 
work.  And  it  was  mandatory  for  that  network  to  be  provided  by  a  sin¬ 
gle  service  provider. 

Then  the  Frame  Relay  Forum  developed  the  frame  relay  NNI  and 
the  ATM  Forum  developed  the  InterCarrier  Interface  to  define  how 
traffic  could  be  handed  off  from  one  service  provider  to  another. The 
good  news  is  that  the  specifications  were  developed  and  worked 
well.  The  bad  news  is  that  even  today,  the  willingness  of  service 
providers  to  implement  NNls  is  driven  more  by  politics  and  market¬ 
ing  than  by  meeting  customer  needs. 

Moving  forward,  the  need  for  the  rapid  implementation  of  NNls  for 
VoIP  is  obvious.  But  for  these  NNls  to  meet  the  market  need,  they 
must  be  implemented  openly  and  universally,  like  the  Internet’s  peer¬ 
ing  points. 


The  need  for  the 
rapid  implemen¬ 
tation  of  NNls 
for  VoIP  is  obvi¬ 
ous.  . . . they 
must  be  imple¬ 
mented  openly 
and  universally. 


Taylor  is  president  of  Distributed  Networking  Associates  and  edi¬ 
tor/publisher  of  Webtorials.com.  He  can  be  reached  at  taylor@web 
torials.com. 


YANKEE  INGENUITY 

Howard  Anderson 

Reality  TV  is  hot,  hot,  hot!  And  almost  no 
one  goes  to  industry  trade  shows  or 
seminars  anymore.  My  solution?  A  new 
reality  show:  “Network  Survivor,”  where  tele¬ 
com  participants  fight  the  technological 
equivalents  of  piranhas  and  typhoons.  I 
dropped  a  note  to  my  e-mail  list  for  sugges¬ 
tions  and  received  the  following  replies: 

“Dear  Howard: 

“My  name  is  Jack  and  I  used  to  be  a  $20  million/year  man  fol¬ 
lowing  Wall  Street.  Now  I  am  pursued  by  evil  state  attorneys  gener¬ 
al  and  in  danger  of  being  eaten  alive  by  bloodsucking  former 
investors.  My  life  is  a  living  hell;  it  makes  ‘The  Fugitive’  look  like  a 
walk  in  the  park!  1  would  be  glad  to  have  ‘Network  Survivor’  mod¬ 
eled  after  my  travails.” 


Must-see  TV:  ‘Network  Survivor’ 


“Dear  Howard: 

“My  name  is  Dave  and  I  run  the  largest  long-distance  telecom  com¬ 
pany  in  America.  All  my  life  I  trained  for  this  job.  And  when  1  get  it, 
what  do  I  get?  Two-thirds  of  my  assets  are  sold  to  some  damn  cable 
company!  Every  telco  in  the  country  is  my  competitor,  and  I  lose 
share  each  month.  I  am  forced  to  oversee  the  Decline  and  Fall  of  an 
Empire.  Everyone  wants  a  piece  of  my  hide!" 

“Dear  Howard: 

“Michael  here.  I’m  currently  head  of  the  FCC  —  and  I  thought  I  had 
a  cushy  job.  My  old  man  was  The  Man,  and  I  had  it  made  . . .  until  my 
cohorts,  my  buddies, stabbed  me  in  the  back!  Didn’t  they  understand 
the  rules?  I  was  the  Sun  god;  I  could  have  retired  on  the  consulting 
fees  I  would  have  made.  Now  I  am  mocked.  Mocked!  Tell  my  story!” 


Telecom  partici¬ 
pants  fight  the 
technological 
equivalents  of 
piranhas  and 
typhoons. 


“Dear  Howard: 

“Our  names  are  Matt  and  Jeff,  and  we  used  to  run  telecom  for  a 
major  oil  pipeline  company  and  a  large  New  York  investment  bank. 
We  perfected  the  art  of  ‘the  advisory  board,’  where  hot  equipment 
companies  would  give  us  options  on  25,000  shares,  and  we  would 
buy  their  equipment  —  and  make  fortunes  when  these  same  com¬ 
panies  went  public  and  we  could  flip  the  stock.  Today?  Nothing, 
nada,  zilch!  We  are  forced  to  live  on  (gasp)  . . .  our  salaries!  Tell  our 
story  on  ‘Network  Survivor’!” 


“Dear  Howard: 

“My  name  is  Roth.  I  used  to  run  the  largest  telecom  equipment  com¬ 
pany  in  Canada.  1  was  loved;  I  was  revered.  I  regularly  was  bestowed 
with  honorary  degrees.  If  it  were  possible,  I  would  have  been  knighted. 
I  was  hiring  almost  every  engineer  who  graduated  in  all  of  Canada.  My 
stock  had  made  virtually  every  Canadian  rich, rich,  rich!  Then  I  fell  from 
grace.  My  company  collapsed.  My  stock  collapsed. Today  people  shun 
me  on  the  streets;  urchins  taunt  me,  Canadians  spit  when  they  hear  my 
name.  I  am  forced  to  run  the  gauntlet  of  ridicule  and  ire.  Hell  hath  no 
fury  like  a  Canadian  scorned!” 


“Dear  Howard: 

“Call  me  Bernie.  1  perfected  the  art  of  cooking  the  books.  1  would 
buy  companies  for  overinflated  values  and  then  book  fictitious  rev¬ 
enues  by  something  I  called  swaps.  Now  I  am  forced  to  wear  an 
orange  jumpsuit  and  survive  with  a  group  of  inmates  that  wouldn’t 
know  a  401  (k)  from  Levi’s  405  jeans.Think  HBO  —  ‘Oz’  in  pinstripes! 
Have  your  people  call  my  people.  Let’s  do  lunch  (here, by  necessity).” 


There  you  have  it,  reality  TV  lovers.  I’m  sure  you  will  insist  that 
“Network  Survivor”  be  carried  on  your  local  cable  channel  or  be 
available  on  Pay  Per  View.  Call  now;  our  operators  are  standing  by. 

Anderson  is  senior  managing  director  of  YankeeTek  Ventures,  a 
Cambridge,  Mass.-based  venture  capita!  fund  for  early-stage  technol¬ 
ogy  companies.  He  can  be  reached  at  handerson@yankeetek.com. 


Complimentary  Event  for  Qualified  Attendees! 
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TECHNOLOGY  TOUR 


JOIN  US  IN  A  CITY  NEAR  YOU! 


June  10 

New  M,  NY 

June  12 

San  Jose,  CA 

June  17 

Philadelphia,  RA 

June  19 

Chicago,  IL 

Crowne  Plaza  Hotel 
Silicon  Valley  Conference  Ctr. 
Doubletree  Hotel 
Hyatt  Regency  O'Hare 


Is  your  voice  over  IP  network  in  place?  Finally  up  and  running?  Now  the  ques¬ 
tions  start  and  the  real  work  begins.  Are  you  on  track  to  realize  the  power 
and  profits  of  a  converged  network?  Do  you  have  the  answers,  expertise,  and 
solutions  you  need  to  deliver  on  the  promise  of  your  deployment?  Join  us  at 
the  Network  World  Technology  Tour  Voice  Over  IP:  Maximizing  the  Impact  of 
Your  Rollout.  Learn  how  to  tackle  the  technical,  organizational  and  accounting 
requirements  that  position  you  to  meet,  indeed  exceed,  the  "day-two"  demands 
and  expectations  of  users  and  management  alike.  At  this  watershed  event  you'll 
compare  experiences,  establish  benchmarks,  and  gain  clarity  with  colleagues 
who  -  like  you  -  bridged  the  voice/data  gap,  defined  the  future  of  networks, 
and  now  lead  the  voice  over  IP  revolution. 

Advance  Reservation  is  Required  for  Complimentary  Attendance 

REGISTER  NOW! 

Online  at  www.nwfusion.com/events/voip2 
or  call  1-800-643-4668 


Practical  intelligence  &  takeaways: 

*  Cost,  quality  and  savings  benchmarks 

■  Training  programs  for  in-house  staff 
to  support  VoIP  deployments 

■  Industry  "best  practices"  performed 
within  other  IT  organizations 

*  Key  strategies  that  capture  both 
tangible  and  intangible  ROI 

■  Tighter,  faster  integration  of  voice 
messaging  enterprisewide 

*  Comparative  evaluations  of 
leading-edge  products  and  services 


PLATINUM  PRESENTING  SPONSORS: 


GOLD  EXHIBITING  SPONSORS: 


invent 

hp  ProCurve  networking 


R 

FOUNDRY 

NETWORKS 

@  MITEL 


invent 
HP  OpenView 

o 

Qwest. — » 


Alt  i  C  e  n 

COMMUNICATIONS 


Networks 


This  event  is  limited  to  Network  and  IT  professionals  involved  in  the  evaluation ,  purchase  and  implementation  of  voice  over  IP  products  and  services.  Network  World  Events  reserves  the  right  to 

determine  total  audience  and  profile  of  complimentary  attendees.  Paid  registration  is  also  available. 

To  sponsor  this  Network  World  event  or  if  you  are  interested  in  on-site  training  for  your  company,  contact  Andrea  D'Amato  at  508-490-6520  or  adamato@nww.com. 


Wireless  LANs  can  make 
end  users  more  mobile  and 
more  productive.  And 
installing  a  WLAN  in  a  new 
building  rather  than  running 
cable  can  be  a  big  money- 
saver.  But  how  do  you  fig¬ 
ure  out  the  ROI  of  WLANs? 
Turn  to  page  48  for  calcu¬ 
lators  that  will  help  you  nail 
down  WLAN  costs  and 
determine 

WLAN  savings  and  revenue 
generation. 


A  switch  in 


■  BY  NANCY  GOHRING 

The  wireless  LAN  switch 
missing  piece  that  will  let  wireless  networks 
scale  beyond  the  small  workgroup  to  full¬ 
blown  enterprise  implementations. 

Until  now,  WLANs  consisted  of  a  client  connecting  to  access 
points  crammed  full  of  security,  management  and  other  intelligence 
required  to  control  the  wireless  portion  of  the  network.The  prob¬ 
lem  is  that  managing  multiple  access  points  was  an  unwieldy 
prospect  for  enterprise  deployments  that  could  include  hundreds 
or  thousands  of  access  points. 

Furthermore,  installing  access  points  has  been  a  headache.  Many 
companies  hire  consultants  to  conduct  site  surveys  and  radio  fre¬ 
quency  planning  to  determine  the  best  place  for  access  points.  That’s 
expensive.  Also, WLANs  initially  offered  such  poor  security  that  some  IT 
managers  have  outright  banned  them  in  their  offices. 


It  all  adds  up  to  lots  of  interest  and  lots  of  pilot  projects,  but  not  very 
many  enterprisewide  rollouts. “Right  now,  its  really  been  mainly  trial 
deployments,”  says  Russ  Craig,  research  director  for  Aberdeen  Group. 

An  array  of  point  products  have  hit  the  market  over  the  past  couple 
of  years  aimed  at  solving  these  problems.  But  that  means  if  IT  depart¬ 
ments  need  more  than  one  of  those  products  to  solve  multiple  prob¬ 
lems,  they  have  to  become  system  integrators, something  few  depart¬ 
ments  have  the  budget  or  manpower  to  do. 

Enter  the  WLAN  switch. “The  conclusion  a  bunch  of  folks  came  up 
with  is  that  you  make  the  access  point  a  less  intelligent  device,  and  you 
enable  a  switch  or  a  router  to  communicate  with  all  the  access  points,” 
Craig  says.  “That  way  you  can  manage  them  remotely  and  configure 
them  from  a  central  panel.”  Most  new  products  also  deliver  power  over 
Ethernet  to  the  switches  instead  of  requiring  AC  power. 

Combined,  these  features  will  enable  less  expensive  and  easier 
deployments,  which  could  provide  a  huge  boost  to  the  WLAN  mar- 
ket.“The  uptake  is  going  to  be  significant,”  Craig  says. 


is  emerging  as  the 
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Symbol  was  the  first  vendor  to  ship  wireless  LAN  switches. 


The  world  of  wireless  LANs 


Before  WLAN  switching 


The  super  access  point  approach  The  thin  access  point  approach 


End  users 


Access  points 
handle  security 
and  authenti- 
U— -J  cation. 
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Layer  2  switch 
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The  problem  with 
this  model  is  that  it's 
difficult  to  manage 
large  numbers  of 
access  points. 
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Access  point  handles 
security  and  authentication. 


Wiring  closet 
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Layer  2  switch 


Vivato’s  powerful  WLAN  switch 
is  like  an  access  point  on  steroids. 
Having  as  few  as  one  access  point 
per  floor  addresses  the 
management  issue. 


End  users 
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Thin  access  points 
connect  to  a  WLAN 
switch,  which 
handles  security  and 
authentication. 


Wiring  closet 


Layer  2  switch 
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Most  vendors  are  taking 
this  approach;  some 
WLAN  switches  can 
replace  a  Layer  2  switch. 


Wireless  LAN  switches 


The  term  switch  is  a  bit  of  a  misnomer, 
because  while  the  WLAN  switch  offers  sim¬ 
ilar  management  and  control  functions  as 
a  wireline  switch.it  doesn’t  do  so  on  a  port- 
by-port  basis  and  it  doesn’t  provide  dedi¬ 
cated  bandwidth  to  an  end  user.  An  exact 
parallel  essentially  would  require  dedicat¬ 
ing  a  single  blast  of  wireless  coverage  per 
user.  Until  that  happens,  the  term  switch 
will  have  to  suffice  for  the  current  genera¬ 
tion  of  product. 

Start-ups  and  old  timers  in  the  networking 
and  wireless  worlds  are  flocking  to  the 
wireless  switching  market.The  list  includes 
AireSpace,  Aruba  Wireless  Networks.Nortel, 
Proxim,  Symbol  Technologies,  Trapeze 
Networks  and  Vivato. Although  each  aims  to 
solve  the  same  set  of  problems,  they  do  so 
slightly  differently,  and  while  all  but  Vivato 
dumb  down  their  access  points,  they  do  so 
to  different  degrees. 

Dumbing  down 

“We’re  trying  to  drive  the  commoditiza¬ 
tion  curve  down  so  an  access  point 
becomes  as  cheap  and  mindless  as  an 
Ethernet  port  on  your  wall  so  you  can  put 
them  whereveryou  need  them, "says  David 
Callisch,  marketing  director  for  Aruba. 
Aruba’s  access  point  is  light  but  not  totally 
empty  —  it  does  air  monitoring  to  watch 
for  rogue  access  points. 

Trapeze  also  doesn’t  completely  strip  all 
intelligence  from  the  access  point.“From  a 
control  and  management  aspect,  we  have 
a  thin  [access  point], ’’says  George  Prodan, 
vice  president  of  marketing  for  Trapeze. 


But  Trapeze  access  points  handle  packet 
processing  functions  such  as  encryp¬ 
tion/decryption  and  quality  of  service. 

Symbol  offers  some  of  the  most  stripped 
down  access  points  on  the  market,  com¬ 
prised  of  power  over  Ethernet  capability, 
an  omni-directional  antenna  and  the 
802.1  lb  radio. 

Vendors  also  are  differentiating  them¬ 
selves  by  the  degree  to  which  they  upset 
existing  systems.  The  ideal  solution  inte¬ 
grates  the  WLAN  with  existing  wired  net¬ 
works  so  companies  can  continue  to  take 
advantage  of  previous  investments.  All  the 
vendors  support  that  philosophy,  but  they 
ask  for  some  level  of  upheaval.  At  the  very 
least,  they  push  customers  to  use  their 
access  points  to  get  the  best  performance. 

Standing  out 

With  so  many  start-ups  attacking  the 
same  market,  the  pressure  to  stand  out 
from  the  crowd  is  intense.  Aruba  says  it 
hopes  its  flexible  architecture  will  attract 
customers.  Users  will  have  the  option  of 
placing  the  Aruba  switch  in  the  wiring 
closet  with  existing  Layer  2  switches  or 
centralizing  the  switch  in  the  data  center. 

Where  the  WLAN  switch  sits  might  be  a 
crucial  selling  point  for  many  customers. 
Sarah  Kim,  an  analyst  for  The  Yankee 
Group,  says  that  asking  customers  to 
replace  an  existing  switch  will  be  a  tough 
sell. “There’s  no  way  anyone  in  this  market 
will  go  to  a  prospective  customer  and  say, 
Take  this  out  of  your  closet,”’ she  says. 

But  Proxim  does  just  that.  Proxim’s 
Maestro  switch  will  replace  an  existing 
Layer  2  switch,  handling  wired  and  wire- 


1 

I 

1 

ill 

I 

i 

I  -  1 

•  *  L",  -  • 

Aruba  5000  WLAN 
switch  supports  up  to 
72  10/100  Ethernet 
ports,  six  Fast  Ethernet 
ports  and  provides 
firewall,  VPN  and  wire¬ 
less  security  features. 


The  start-ups 

Five  start-ups  have  announced  WLAN  switches. 


The  established  players 

Three  established  companies  have  entered  the  WLAN  switch  arena. 


Nortel 

Proxim 

Symbol 

Core  technology 

Switching 

Wireless 

Wireless 

Product  name 

Security  Switch 

Maestro 

Mobius  Axon 

Shipping 

No 

No 

Yes 

Where  intelligence 
resides 

Can  be  split 

Switch 

Switch 

Where  switch  is 
deployed 

Wiring  closet 

Wiring  closet 

Wiring  closet 

Distinguishing 

feature 

Security  switch 
connects  to  VPN 
switch. 

Has  been  shipping 
WLAN  manage¬ 
ment  tools  since 
1998. 

Has  been  shipping 
WLAN  switch 
since  November. 

less  switching  in  a  single  box. 

“Maestro  is  truly  an  Ethernet 
switch,”  says  Georgeanne  Ben- 
esch,  vice  president  of  product 
management  at  Proxim.  “What 
we’ve  done  is  added  functional¬ 
ity  to  a  switch  to  enhance  it  for 
wireless.” 

Still,  Proxim  says  it  thinks  it  has 
the  lead  on  competitors  because 
Maestro  builds  on  the  ex¬ 
perience  of  Proxims  first-genera¬ 
tion  product,  Harmony.  Three 
years  ago  it  started  shipping  Har¬ 
mony  which  centralized  WLAN 
systems,  but  wasn’t  a  full  switch. 

Each  vendor  has  a  heavy 
focus  on  security,  offering  solu¬ 
tions  to  address  security  at  all 
layers.  They  all  support  802.11 
standard  security  mechanisms  including 
Wi-Fi  Protected  Access  and  802.  IX,  and 
multiple  virtual  LANs. 

Trapeze  is  unique  in  that  it  doesn’t  sup¬ 
port  VPNs  because  it  says  the  setup  and 
tear  down  time  is  too  long  to  allow  quick 
enough  handoffs  to  support  voice  services. 
Instead,  Trapeze  offers  a  variety  of  tech¬ 
niques  that  can  encrypt  transmissions  over 
the  air  because  the  encryption  happens  at 
the  access  point. “It’s  much  more  powerful 
than  a  VPN  termination  in  the  switch,  which 
leaves  the  rest  of  the  connection  in  the 


AirFlow  Networks 

Airespace 

Aruba 

Legra  Systems 

Trapeze 

Product  name 

AirSwitch 

Airespace  Wireless 
Switch 

Aruba  Switch 

Legra  Switch 

Mobility  Switch 

Shipping 

No 

Yes 

No 

No 

No 

Is  intelligence  in 
access  point  or 
switch? 

Switch 

Switch 

Switch 

Switch 

Both 

Where  is  switch 
deployed 

Wiring  closet 

Wiring  closet 

Wiring  closet  or 
data  center 

Wiring  closet  or 
data  center 

Wiring  closet 

Distinguishing 

feature 

Strong  Layer  2/3 
switching,  all  access 
points  share  one 
MAC  address. 

Control  system 
software  for  pro¬ 
visioning,  optimi¬ 
zation  and 
management. 

Automated  site 
survey,  self¬ 
calibrating  Wi-Fi 
network. 

Legra  operating 
system  on  Linux 
kernel  lets  switch 
run  Linux 
applications. 

Predeployment 
planning  tools  and 
management  tools. 

Vivato's  Wi-Fi  switch  can 
be  mounted  indoors  or 
outdoors. 


clear/  Prodan  says.“Our  wireless  solution  is 
more  secure  than  the  wired”  network  at 
most  corporations,  he  says. 

Outing  rogues 

The  way  each  company  handles  rogue 
access  points  also  is  worth  looking  at 
closely.  Aruba’s  access  points  scan  the  air 
so  that  the  switch  can.see  illegal  associa- 
tions.The  switch  can  send  a  message  to  a 
nearby  authorized  access  point,  which  dis¬ 
connects  the  client  associating  with  the 
rogue  access  point. 

Symbol’s  client  devices  look  for  unautho¬ 
rized  transmissions  over  the  air,  reporting 
that  data  back  to  the  access  points.  “We 
make  cooperation  a  whole  solution,  not  just 
in  the  infrastructure,”  says  Ray  Martino,  vice 
president  and  general  manager  at  Symbol. 

AirFlow’s  approach  to  rogue  access 
points  is  unique  because  of  the  way  it 
handles  media  access  control  (MAC) 
addresses.  In  a  typical  WLAN  network, 
each  access  point  has  its  own  MAC  that 
associates  with  the  user’s  client.  In  an 
AirFlow  network,  the  client  associates  with 
a  single  MAC  that  sits  in  the  switch.  The 
architecture  makes  roaming  easy  because 
reassociation  isn’t  necessary  when  a  user 
moves  from  one  access  point  to  the  next 
because  the  MAC  never  changes.  It  also 
eliminates  interference  issues  because 
each  access  point  can  operate  on  the 

See  WLAN,  page  46 


See  DB2  software  connect  data,  near  and  far. 
See  DB2  software  connect  formats,  old  and  new. 
See  DB2  software  create  insight,  again  and  again 


DB2.  it’s  the  ultimate  portfolio  of  real-time  informa 
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agement  software.  You  can  now  leverage 
see  it  all.  as  if  it  resided  in  a  single  place. 


Insightful  and  open,  DB2  lets  you  use  and  build  on  what  you  already  have,  whether  it’s  IBM,  Oracle 
or  Microsoft®—  goodbye  “rip  and  replace.”  For  a  DB2  Software  Information  Kit,  visit  ibirt.com/db2/seeit 
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Going  outdoors 


WLAN 

continued  from  page  44 

same  channel  “It's  the  networking  effect  as 
opposed  to  taking  isolated  environments 
and  pulling  them  together,”  says  President 
and  CEO  Robert  Machlin. 

Machlin  says  his  competitors  are  provid¬ 
ing  a  Band-Aid  solution  that  connects  iso¬ 
lated  access  points.  Instead,  Airflow  rede¬ 
fines  the  shape  of  the  network  by  central¬ 
izing  the  MAC  function  into  the  switch  “so 
that  the  access  points  are  nothing  more 
than  extension  cords,”  he  says. 

One  MAC  address  helps  with  security. 
Rogue  access  points  can’t  connect  to  the 
network  because  they  won’t  have  the 
same  MAC  address  as  the  rest  of  the  WLAN 
network. 

Customers  could  use  different  channels 
with  AirFlow’s  solution,  but  they  would  do 
so  to  serve  their  own  purposes.  For  exam¬ 
ple,  they  might  want  to  tune  the  access 
points  that  serve  one  department  to  a  dif¬ 
ferent  channel  than  the  one  next  door. 

AireSpace,  which  has  deployed  its  plat¬ 
form  at  the  Duke  University  Medical 


Vivato  has  created  a  buzz  with  an  unusual 
approach  that  puts  it  in  a  category  of  its 
own.  Vivato’s  offering  uses  smart  antenna 
technology  to  address  the  radio  frequency 
shortcomings  of  current  Wi-Fi  systems. 
Instead  of  spewing  radio  signals  out  over 
360  degrees,  Vivato  antennas  focus  three 
parallel  narrow  beams  on  clients  that  are 
using  the  connection.  Because  it  focuses  on 
narrow  areas,  power  is  concentrated  and 
the  beam  can  cover  a  greater  distance  than 
traditional  access  points.  Even  though  the 
Vivato  system  complies  with  the  802.11 
standard,  the  antenna  can  reach  as  far  as 
900  feet,  replacing  eight  to  12  access  points, 
Vivato’s  Phil  Belanger  says. 

Still,  Vivato’s  switches,  which  usually  are 
located  on  each  floor  of  an  office  building, 
must  each  be  updated  individually 
because  all  the  intelligence  is  in  the  same 
box  as  the  antenna  and  radio.  Vivato  has 
introduced  an  auxiliary  product  that  ties 
each  switch  to  a  single  management  point. 

Vivato  also  is  unique  in  that  it  is  selling 
an  outdoor  switch  that  can  beam  802.1  lb 
signals  over  distances  of  up  to  3,200  feet. 
This  switch  could  be  used  on  a  college 
campus,  in  a  downtown  area  or  even  to 


Nortel  WLAN 
Security  Switch 
2250  offers 
access  control, 
load  balancing 
and  roaming. 


Center  in  Durham,  N.C.,  and  the  University 
of  California  at  Berkeley  school  of  electri¬ 
cal  engineering  and  computer  science, 
focuses  on  ease  of  setup  and  operation, as 
well  as  security. 

“We  put  a  lot  of  energy  into  building  a 
system  that  mediates  the  [radio  frequen¬ 
cy]  environment  automatically  says  Alan 
Cohen,  vice  president  of  marketing  for 
AireSpace.  The  system  includes  tools  for 
load  balancing,  interference  manage¬ 
ment  and  dealing  with  rogue  access 
points. 


blast  wireless  connectivity  from  one  build¬ 
ing  to  another  without  having  to  install 
access  points  inside. 

The  WLAN  switch  space  isn’t  just  for  start¬ 
ups,  however.  Nortel  recently  jumped  in  the 
game  with  a  product  it  refers  to  as  a  secur¬ 
ity  switch.  Nortel’s  main  goal  with  the 
switch  is  to  let  customers  administer  one 
security  policy  that  operates  across  wired 
and  wireless  networks. 

“You  can  get  to  one  security  manager 
and  define  a  policy  and  apply  on  all  sub¬ 
systems  in  a  consistent  and  easy  fashion,” 


A  switch  by  any  other  name 

Two  start-ups  have  products  that  compete  with  WLAN  switches  but 
aren’t  technically  switches. 


Chantry 

Vivato 

Product  name 

BeaconMaster 

Wi-Fi  Switch 

Shipping 

No 

No 

What  it  really  is 

It's  a  router. 

It's  a  powerful  Wi-Fi  access 
point;  connects  to  Ethernet 
switch. 

Where  intelligence 

resides 

Router 

Fat  access  point/one  per  floor 

Where  deployed 

Data  center 

Indoors/outdoors 

Distinguishing 

feature 

Layer  3  features  such  as 
quality  of  service  and  routed 
subnets. 

Antenna  technology  lets  Wi¬ 
Fi  beam  travel  2.5  miles 
outdoors,  984  feet  indoors. 

WLAN  adapter  shipments 

Gartner  predicts  that  worldwide  shipments  of  wireless  LAN  adapters 

will  reach  nearly  35  million  units  by  2005.  _ _  „  , 

— —  Total 

Millions  of  units  '■■■■"  Shipped  with  PC 


WLAN  adoption  plans 

Only  10%  of  50  companies  surveyed  said  they  had  no  WLAN  plans. 

Percent  of  respondents 

30%  - 


Company 
already  has 
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of  broadband 
wireless  in 
production 
mode. 

30% 


says  Atul  Bhatnager,  general  manager  for 
Nortel’s  Ethernet  switching  business. 

Another  category  of  vendors  makes  hubs 
that  they  say  can  perform  all  the  same  func¬ 
tions  as  WLAN  switches.  Vernier  Networks 
offers  a  hub  connecting  access  points  from 
any  vendor.  Bluesocket  and  ReefEdge  fall 
into  the  same  category  Bluesocket  also  has 
announced  a  “switch  wireless  gateway”  that 
combines  its  existing  gateway  functionality 
with  switching. 

Each  player  in  the  WLAN  switch  space 
brings  a  slew  of  capabilities  that  each 
thinks  will  be  most  important  to  customers. 
But  the  introduction  of  products  is  really 
just  an  opening  salvo.“WLAN  is  a  relatively 
immature  technology’  Symbol’s  Martino 

\  ^ 


notes.“The  feature  battle  will  go  on  forever1 

Even  after  this  story  went  into  production, 
two  more  vendors  came  to  our  attention: 

•  Legra  Systems  announced  what  it  calls 
the  first  “wireless  operating  system,”  a  Linux- 
based  operating  system  that’s  part  of  its 
forthcoming  wireless  LAN  switches. 

•  Chantry  Networks  is  touting  a  family  of 
access  points  and  Layer  3  routers.  Chantry 
says  Layer  3  functionality  allows  for  cen¬ 
tralized  management  and  for  the  creation 
of  virtual  wireless  LAN  segments. 

•  And  Network  World  reported  last  week 
that  HP  is  entering  the  market. 

Gohring  is  a  freelance  writer.  She  can  be 
reached  at  nangohring@yahoo.com. 


In  the  Trapeze  Mobility  Exchange  System,  switches  handle  user  information  for  authentication, 
roaming  and  access  control.  The  access  points  can  handle  encryption  and  support  roaming. 


See  old  apps  combine  with  new  apps. 
See  customers  connect  with  partners. 
See  today’s  stuff  click  with  tomorrow’s 


WebSphere  Business  Integration  is  far  and  away  the  leading  integration  software  for  the  on  demand 
era.  Open  and  flexible,  WebSphere  lets  you  midei,  integrate  and  manage  all  of  your  business 
processes.  WebSphere  delivers  an  infrastructure  that  quickly  responds  to  change,  meeting  business 
demands,  on  demand.  For  an  Integration  InfoKit  and  case  studies,  visit  ibm.com/websphere/seeit 
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The  ROI  of  wireless  LANs 

Key  points  to  consider  when  providing  justification  for  wireless  LAN  investments. 


■  BY  KATHRYN  KOROSTOFF 

ROI  analysis  for  any  technology  typically  involves  cal¬ 
culations  that  show  how  a  given  solution  saves  money 
makes  money  or  both.  Wireless  LAN  ROI  analysis  is  no 
exception.  However,  the  experiences  reported  by  those 
who  deploy  it  vary  dramatically. 

In  planning  your  WLAN  ROI,  you  must  address  a  few 
key  questions: 


•  Are  you  choosing  between  wireless 
and  wired  for  a  new  LAN  installation?  Or 
are  you  deciding  simply  whether  or  not  to 
add  a  WLAN  to  an  existing  wired  LAN? 

•  Are  you  deploying  in  isolated  work¬ 
groups,  or  are  you  building  an  enterprise 
solution  (which  will  require  deploying 
access  points  not  just  for  client  connec¬ 
tions  but  possible  also  for  point-to-point 
links)? 

•  How  mobile  are  your  employees?  Do 
they  need  to  move  around  frequently  dur¬ 
ing  the  workday?  Do  they  work  in  each 
other’s  offices?  Do  they  have  working 
meetings  where  access  to  server-based 
applications  can  be  important? 

Hard  questions 

As  these  few  questions  show,  the  type  of 
deployments  vary  a  lot  and  can  affect  the 
potential  ROI. 

How  many  access  points  do  you  need? 
The  number  of  access  points  varies  with 
the  number  of  end  users  and  size  of 
building.  Different  organizations  use  dif¬ 
ferent  rules  of  thumb,  but  typically  the 
range  is  10  to  20  end  users  per  access 
point. 

How  much  time  will  you  spend 
planning  and  placing 
access  points?  The  time 
spent  placing  access 
points  varies  with  build¬ 
ing  specifications.  Some 
network  managers  report 
that  locating  access 
points  is  a  snap;  others 
report  that  it  can  take 
time  i:i  their  buildings 
because  of  building  mate¬ 
rials  or  placement/types 
of  wails 


Additional  benefits 

In  addition  to  employee  time  savings, 
WLAN  users  commonly  experience  hard- 
er-to-quantify  sources  of  return.  One  such 
example  is  improved  employee  satisfac¬ 
tion.  We  often  hear  wireless-equipped 
employees  talk  about  the  satisfaction  of 
being  able  to  keep  a  meeting  short  by 
having  access  to  applications  or  files 
while  in  a  conference  room.  What 
employee  wouldn’t  value  a  technology 
that  helps  keep  meetings  short? 

It's  all  about  image 

Users  often  report  even  less  tangible 
benefits.  For  example,  consulting  compa¬ 
nies  that  want  to  project  a  technology¬ 
leading  image  to  clients  visiting  their 
offices  would  want  their  clients  to  see  lap- 
top-equipped  consultants  accessing  data 
whilst  untethered.  There  is  value  in  pro¬ 
jecting  an  image.  It’s  just  hard  to  quantify. 

The  many  factors  contributing  to  WLAN 
ROI  vary  from  industry  to  industry,  from 
company  to  company,  and  many  of  them 
are  mutable. 

When  you  consider  your  unique  needs 
and  those  of  your  employees,  you  can 
more  readily  determine  the  if,  and  the 
when,  of  WLAN  deploy¬ 
ment. 

Later  this  year  some¬ 
thing  to  consider  is  when 
Wi-Fi-compatible  phones 
hit  the  market.it  will  add  a 
new  dimension  to  the 
WLAN  ROI  case.  Stay 
tuned. 

Korostoff  is  president  of 
Sage  Research  in  Natick, 
Mass. 
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Go  online  for  more  wireless  research. 
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Costs  vs.  savings 

These  tables  outline  costs  and  savings/revenue  generation  for  LANs. 


WLAN  costs 

Hardware  costs 

•  Access  points 

•  Wireless  network  interface  cards  (for 
installation  and  extras  for  spares). 

Software  costs 

•  Security  orVPN  software  (some WLAN 
customers  useVPNs  to  provide  security  on  the 
wireless  network). 

•  Network  planning  (time  spent  to  plan  access 
point  location,  install  and  configure  NICs). 

Installation  costs  (time  for  either  •  Access  point  installation  and  configuration, 
staff  members  or  consultants)  .  Enab(ing  security  (WEp  WPAi  among  others). 

Ongoing  maintenance  costs  •  In  addition  to  normal  maintenance  costs 

associated  with  networking,  network  managers 
report  they  spend  time  on  a  new  activity:  enforcing 
WLAN  policies  (including  identification  of  rogue 
access  points  and  making  sure  employees  don't 
share  WEP  keys). 

WLAN  savings/revenue  generation 

Network  cabling 

•  For  new  installations,  choosing  a  WLAN  reduces  the 
amount  of  money  spent  on  cabling.  While  some 
organizations  installing  WLANs  also  choose  to  install 
Category  5  cable  to  the  desktop,  some  don’t.They  might 
install  Cat  5  only  for  certain  workgroups,  and  might  skip 
over  conference  rooms  and  meeting  places. Thus,  the 
amount  of  cable  savings  will  vary.  Still,  between  the  cost 
of  the  cable  itself  and  the  cost  of  installation,  savings 
can  add  up  quickly. 

IT  staff  time 

•  Network  managers  sometimes  find  they  spend  less  time 
on  moves,  adds  and  changes  with  WLANs.  As  workgroups 
move,  consolidate  or  merge,  the  amount  of  time  spent 
administering  these  changes  can  be  less  with  WLANs. 

Employee  time  savings 

•The  most  quantifiable  benefit  of  WLAN  use  is  time 
savings.  Hours  saved  per  week,  per  employee,  and  the 
corresponding  money  savings  will  vary  among  industries 
and  organizations. 

Other  time  savings  users  cite: 

•  Accessing  e-mail  anywhere,  for  example  at  the 
cafeteria  during  lunch. 

•Taking  instantly  accessible  notes  and  being  able  to 
communicate  during  meetings. 

•  Retail:  Being  able  to  check  something  on  the  network 
directly  from  the  sales  floor. 

•  Accessing  information  directly,  rather  than  calling  a 
colleague  to  retrieve  it. 

www.nwfusion.com 
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RFP  strategy 

Follow  these  do’s  and  don'ts  for  getting  the  best  deal  for  your  network  project 


■  BY  TIM  GREENE 

As  the  manager  of  telecom  procurement  for  insurance  giant  Aetna,  Donna  Daigle  oversees 
vices  and  network  gear.  She  also  is  a  member  of  the  Caucus,  an  association  of  technology 
Caucus  seminar  called  “Writing  Strategic  RFPs”she  shared  some  of  her  expertise  in  creating 
lyze  the  documents,  and  how  to  effectively  negotiate  with  the  vendors  who  submit  them. 
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Building  an  RFP  team 

*  Involve  members  representing  all  areas  of  buy-in  and  sign-off — end  users,  IT  staff,  legal  staff, 

•  Let  groups  represented 

on  the  team  rotate  people  in  and  out  They’ll  have  no  continuity,  be 

network  security,  procurement  and  human  resources.  unaware  of  agreements  the  team  already  has  reached  and  generally  slow  things  down. 

•  Restrict  who  on  the  team  is  allowed  to  speak  directly  to  suppliers.  Keep  it  to  two  people:  a  tech-  •  Let  vendors  contact  employees  outside  of  team  meetings.  Vendors  will  use  the  opportunity  to 
nical  person  and  business  person.  ferret  out  information  that  can  give  them  an  advantage. 


purchases  of  $143  million  in  telecom  ser- 
procurement  professionals.  Recently  at  a 
RFPs,  assembling  teams  to  write  and  ana- 


•  Point  out  that  through  their  401  (k)  or  profit  sharing,  employees  are  invested  in  the  company's 
performance.  Getting  a  good  deal  will  help  the  bottom  line. 


•  Promote  the  idea  that  the  RFP  must  yield  the  best  product  at  all  costs.The  cost  must  be  in  bal¬ 
ance  with  business  needs. 


Dealing  with  vendors 

•  Look  for  the  slide  that  vendors  often  flash  up  quickly  to  show  the  names  of  their  marquee  cus-  •Tell  suppliers  who  else  is  submitting  an  RFP.They  know  their  competitors'  prices  and  will  tailor 

tomers  and  assign  team  members  to  write  down  the  names.These  customers  might  not  be  on  their  bid  to  slightly  undercut  them  rather  than  giving  you  the  best  deal, 

the  list  of  satisfied  customers  that  vendors  give  you  as  references. 

•  Ever  reveal  your  budget  That  will  tell  suppliers  just  how  high  they  can  push  the  price  of  their 

•  Get  vendors  to  sign  nondisclosure  agreements  regarding  the  RFP.  proposal. 


Writing  the  RFP 

•  Allow  space  for  suppliers  to  think  creatively.  Describe  your  business  needs  and  see  what  they 

come  up  with. 

•  Notify  vendors  that  the  RFP  will  become  part  of  the  awarded  contract  If  they  won’t  stand  by  it 

contractually,  the  RFP  should  be  suspect 

•  Specify  the  format  you  want  proposals  sent  in  —  CD,  paper,  floppy  disk  —  and  the  number  of 
copies  you  want  Require  separate  attachments  that  can  be  distributed  easily  among  your  cor¬ 
porate  departments. 


•  Let  vendors  ramble.  Limit  the  number  of  pages  they  can  submit  to  reduce  the  time  it  will  take  to 

review  them. 

•  Let  vendors  keep  information  that  is  proprietary  to  your  business.  Get  it  back.  Don't  describe 

more  of  your  network  environment  than  they  need  to  know  to  bid. 

•  Ask  compound  questions.  “Does  your  software  support  Windows,  Unix  and  AppleTalk?”  leaves 

wiggle  room  for  a  yes  answer  when  the  software  actually  only  supports  Windows.  Instead,  ask 
about  support  for  each  in  a  separate  question,  leaving  no  room  for  confusion. 


Evaluating  RFPs  and  demonstrations 

•  Ask  end  users  what  features  they  need  vs.  those  that  would  be  just  nice  to  have.  Make  the 

must-haves  your  high-level  requirements. 

•  Develop  a  point  system  for  ranking  the  proposals. 

•  Make  sure  features  and  functions  actually  are  demonstrated,  not  just  talked  about  Find  out  if 

any  product  modifications  were  made  to  get  the  demo  to  work. 

•  Document  what  you  heard  in  the  session  as  soon  as  possible  and  certainly  before  you  sit 

through  another  vendor's  demonstration. 

•  Watch  nonverbal  communications.  See  whether  the  sales  pitch  makes  the  vendor’s  technical 

team  fidget  or  roll  their  eyes. 


•  Have  a  large  number  of  choices  for  scoring.  Award  one,  three  and  five  points  only  based  on  indi¬ 

vidual  requirements  to  spread  out  the  numerical  value  of  scores. 

•  Have  everyone  read  the  entire  RFR  Divvy  up  the  work  into  subteams  that  take  only  certain  sec¬ 

tions  from  all  the  RFPs  and  compare  them. 

•  Pay  for  product  evaluations  or  consider  alpha  and  beta  products. 

•  Go  to  the  vendor’s  facility  for  a  demonstration.  You  want  to  see  it  work  in  your  network  environ¬ 

ment  and  see  how  it  affects  performance  of  other  traffic. 

•  Permit  vendors  to  stray  from  a  technical  discussion  and  avoid  answering  your  questions. 


EASIER  TO  USE 

•  Access  and  control  servers  from  any  location  using  Avocent's 
KVM  OVER  IP™  switching 

•  AVWorks  software  is  included  with  AutoView  1000R/2000R 
switches.  Provides  a  single  interface  to  access  servers  and 
network  devices 

•  User-friendly  interface  lets  you  organize  the  attached  servers.  Use 
logical  naming  conventions  to  group  your  servers  by  type,  site, 
location  or  department.  No  need  to  remember  each  IP  address! 

•  Wizard-based  installation  drastically  reduces  the  time  required  for 
setting  up  similar  technologies 


MORE  ADVANCED  FEATURES 

•  Servers  are  attached  using  intelligent  CAT  5  server  interface 
modules  that  reduce  cable  issues  in  the  rack 

•  Assign  granular  security  permissions  for  each  individual  port 
number  with  Java-based  AVWorks  software 

•  Comprehensive  security  includes  authentication  and  data 
transfers  using  SSL  connections 

•  Supports  DES,  3DES  and  128bit  encryption 


AutoView 

KVM 

Switches 

■■■■Hi 

Users 

Servers 

Platforms 

Cabling 

KVM  OVER  IP™ 
Remote  Access 

Software 

AutoView  1000R 

1  local,  1  digital 

16 

PS/2,  Sun 
USB 

CAT  5 
AVRIQ 

Yes 

AVWorks  and 
OSCAR 

AutoView  2000R 

1  local,  2  digital 

16 

PS/2,  Sun 
USB 

CAT  5 
AVRIQ 

Yes 

AVWorks  and 
OSCAR 

Also  Available 

AutoView  2000 

2  local 

16 

PS/2,  Sun 
USB 

CAT  5 
AVRIQ 

No 

OSCAR 

Call  for  an  Avocent  Authorized  Reseller  near  you 

1-866*286*2368  ext.  3006 


Special  offer  on  these  new  switches:  Download  your  free 
copy  of  Avocent's  Definitive  KVM  Buyer's  Guide  at 
www.avocent.com/guide  or  call  1-866-286-2368  ext.  3006. 


Avocent. 


Av< 


AutoVktw.  AVWorks.  KVM  OVER  IP  end  The  Power  of  Being  There  are  trademarks  of  Avocent  Corporation  Copyright  C  2003 
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With  Cyclades,  the  only  thing 
missed  at  your  data  center... 


Feature 

Benefit 

Remote  Access 

PCMCIA  supporting  modem,  ISDN, 

GSM,  Wireless  LAN 

Security 

SSH  vl  &  v2,  LDAP,  Kerberos,  TACACS+, 
RADIUS,  Secure  ID 

Dual  Power  Supply 
(AC  &  DC) 

High  availability  when  power  fails 

Dual  Ethernet 

PCMCIA  supporting  additional  ethernet 
for  redundancy 

Port  Density 

1,4,8,16,32  or  48  ports  in  1U  rack  space 

“ Best  Hardware  for  Linux" 
since  1995. 


Our  console  servers  give  you  all  the  freedom 
you  need  to  manage  your  networks  and  servers 
anytime,  anywhere. 

Which  is  why  Cyclades  sells  more  console  servers  than  anyone 
else  in  the  industry. 

The  AlterPath'ACS  offers  the  industry's  only  combination  of 
dual  power  supply  and  PCMCIA  slots  for  enhanced  redundancy 
and  functionality.  And  because  our  technology  is  based  on 
Open  Source  Software  (Linux),  you  benefit  from  innovative 
products  that  offer  flexibility,  ease  of  customization  and 
a  high  level  of  security. 

With  Cyclades  console  servers,  you  get  the  convenience  and 
security  you  need  to  access  and  manage  all  of  the  console  ports 
in  your  data  center  at  anytime,  from  anywhere  in  the  world  - 
even  when  the  network  is  down. 


cyclades 


Everywhere  with  Linux' 


So  relax.  You  won't  miss  a  thing. 


www.cyclades.com/nw  •  sales@cyclades.com  •  1 .888. CYCLADES 

©2003  Cyclades  Corporation.  All  rights  reserved.  All  other  trademarks  and  product  images  are  property  of  their  respective  owners.  Product  information  subject 
to  change  without  notice.  Photo  By:  Andre  Perlstein  /  Getty  Images 
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i  wvwv.  buyuptime.  com 


Network  Cables 

t  y  •  /TT. ;  '  *  '  /  ' 

Cisco  and  Fiber 


Power  Adapters 
Cooling  Solutions 


BuyUptime.com 

Your  One-Stop  Shop  for  high  availability  products 


Rack  Accessories 

Power  Distribution 
Devices 


Accessories 

UPS  Management 
Peripherals 

UPS  Management 
Software 

UPS  Replacement 
Batteries 


High  Availability  Made  Easy  — —  . .  111  . . 

As  a  leading  supplier  in  end-to-end  UPS  power,  thermal  cooling,  and  management  solutions,  BuyUptime.com  can 
accommodate  the  level  of  availability  many  customers  have  come  to  expect.  Let  BuyUptime  be  your  one-stop  shop 
for  high  availability  solutions. 


( Mobile  Power  Solutions!) 


Buy  One  Get  One  Free! 

APC  Travel  Power  Adapter 

•  Converts  DC  power  in  an  automobile  to 
75  watts  of  notebook  computer  power 
•Plugs  into  your  vehicle's  cigarette  lighter 
(not  for  use  on  airplanes) 


Part  Number 
PN0TEAC75SP 


Part  Number  PNOTEAC140 


Part  Number  PNOTEAC350 


APC  PNote  AC  140  &  350 

•  For  notebooks.  TVs,  VCRs,  game  consoles  and  more 

•  Auto,  RV  and  boat  compatible 

•  Plugs  into  your  vehicle  s  cigarette  lighter 

•  Audible  alarms 

•  Automatic  shutdown  upon  low  battery 

•  PNoteACUO  has  a  single  power  outlet 

•  PNoteAC350  has  2  power  outlets 


Part  Number  PNote  Pro  Part  Number  PNote  Pro3 


APC  PNote  Pro 

&  PNote  Pro3 

•  Provides  advanced  AC  and  tele¬ 
phone  line  protection 

•  Unique,  in-line  design  creates  a 
compact,  lightweight  surge  protector 

•  Portable  and  appropriate  for  use  in 
any  country  throughout  the  world 


Part  Number 


PNoteCL5 


APC  by  Kryptonite  Locks 

•  Portable  security  systems 

•  Prevents  theft  of  your  laptop  at  work  or  on  the  road. 

•  Braided  steel  cables  (5mm  and  8mm  thick) 

•  Available  in  combination  or  key  lock. 


Part  Number 
PNoteKL8 


Order  via  our  promo  page  and  start  saving  today! 

Visit  http://promo.buyuptime.com 
and  enter  the  Key  Code  k402y 


Call  Toll  Free 

888-288-8843  to  order. 

Fax:(877)411-2080  •  E-mai I :customerservice@buyuptime. com 
801  Corporate  Centre  Drive,  St.  Charles,  MO  63304  •  BY1A3EP-US 
©2003  Systems  Enhancement  Corp.  All  Trademarks  are  the 
property  of  their  owners. 


See  network  trouble  faster  and  fix  it  quicker. 


With  OneToucff. 


The  OneTouch  Series  II  is  the  perfect  tool  for 
troubleshooting  switched  environments.  It  identifies 


OneTouch  m  Series 
Network  Assistant 


ORKSUPf  RVISION 


problems  and  shows  you  solutions  -  fast.  $ee  everything 
from  instant  discovery  of  network  devices  to  locating 
duplicate  IPs.  Sources  of  network  utilization,  errors  and 
broadcasts.  Automatically  tests  patch  cords,  NICs  and 
switch  ports.  Monitors  traffic  throughput.  And  a  lot 
more.  The  bottom  line  is  improved  network  performance. 

It  increases  uptime.  Lowers  maintenance  costs.  And  because 
OneTouch  is  so  easy  to  use,  you'll  cut  training  costs,  too. 


For  more  information  on  value 
pricing  and  availability,  go  to 
CDW  at  www.cdw.com/flukenetworks 


*2003  Fluke  Corporation.  All  rights  reserved.  01720 
Other  products  mentioned  herein  are  the  property  of  theii 


Reading  someone  else’s  ^ 
copy  of  Network  WorldPfHH 


Apply  for  your  own 
Free  subscription  today. 


fcP"  Costs,  security 

Optimism  abounds  »/_  in  “ 

...justified  or  not  VGX  VOIP  US6PS 


Free  subscription 
(51  Issues) 

To  apply  online  go  to 

subscribenw.com/b03 


subscribenw.com/b03 

Apply  for  your 

free 

subscription  today! 

(A  $255  value  -  yours  free) 


Experience  Counts.  GTA  incorporates 

eight  years  of  firewall  experience  into 
5  new  firewall  appliances  for  the  SME 
market.  With  features  including  VPN 
hardware  acceleration,  high  availability, 
content  filtering  and  gigabit  support, 
GTA  offers  complete  firewall  solutions 
at  a  price  SME  businesses  can  afford.To 
learn  more  about  our  family  of  firewalls 
visit  our  website  or  contact  a  GTA 
channel  partner. 


1200 


1500 


1-4GTA  r  www.gta.com  •  info 
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^WTI  -  Internet  Ponte*  Switch  -  Microsoft  Internet 
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"Keeping  the  Net.. .Working!" 


Yes,  you  can  Switch 
Power  over  the  internet... 


Web  Browser  Access  for  Easy  Operation 
Telnet  and  Serial  Access 
Encrypted  Password  Security 
Expandable  to  Five  (5)  Individual  Outlets 
Each  Outlet  can  Switch  a  15  Amp  Load 
On  /  Off  /  Reboot  Switching 


mfe, 


0^0 


INTERNET  POWER 


WWW.Wti.com  1800)  854-7226 


Servers,  routers,  and  other  electronic 
equipment  sometimes  “lock-up,” 
often  requiring  a  service  call  to  a 
remote  site  just  to  flip  the  power 
switch  to  perform  a  simple  reboot... 

The  IPS-15  gives  you  the  ability  to 
perform  this  function  from  anywhere! 


LOCATION:  IPS-15  Live  Demo  Unit 


Plug 

Name 

Status 

On 

Off 

Boot 

1 

Serverl 

r 

r 

r 

2 

Server_2 

.  on  1 

c 

r 

r 

3 

... 

— 

— 

... 

— 

4 

— 

— 

— 

— 

— 

5 

An 

Plugs 

r 

r 

r 

Setup  | 

Logout  | 

Refresh 

1  Apply  | 

Cancel  | 

m 

Expandable! 
Using  IPS  Satellite  Units... 
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Your  network  costs  a  fortune... 


NEW 

LOWER 


protecting  it  doesn't  have  to 

Global  LAN  Furniture 

fjrotects  your  equipment 
or  a  lot  le 


24"  Server  Station 


72"  Workstation 

$799 

Stk.  #  C95033 


Keyboard  drawers 
and  casters  sold 
separately. 


GLOBAL 


COMPUTER  a  Systems? 


company 


For  a  lot  less  money. 

Our  heavy-duty  LAN  Furniture  is  built  to  last  with 
steel-reinforced,  triple-leg  support  and  lateral  Stk.  #  C23955 
braces.  Built-in  cable  management  system  hides 
unsightly  wires  and  organizes  and  separates 
cables.  Deep  30"  work  surface,  adjustable  shelves 
and  sturdy  server  shelf  allow  for  easy  integration  of 
all  your  network  equipment,  providing  a  complete 
storage  solution.  Our  96",  72",  48"  and  24"  wide 
units  combine  with  additional  shelves,  keyboard 
drawers  and  casters  for  unmatched  flexibility  to 
meet  your  changing  needs. 

SAVE  A  TON  OF  MONEY 
ON  YOUR  NEXT 
MEDIA  PURCHASE! 

Check  out  our  prices  today! 

CALL  1 -8OO-8-GLOBAL 

or  visit  us  online  for  the  LAN  solution  that  is  right  for  you. 

www.globalcomputer.com/ go/ mag/Ian 
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IH  or  Out-Band  Access  to 
Consoles  at  Remote  Locations 
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(800)  854-7226  •  www.wti.com 

5  Sterling  •  Irvine  •  California  92618-2517 
(949)  586-9950  •  Fax:  (949)  583-9514 


■  Secure  Shell  (SSHv2)  Encryption 

■  Simultaneous  SSH  or  Telnet 

■  Non-Connect  Port  Buffering 

■  SYSLOG  Reporting 

■  SNMP  Capability 

■  Any-to-Any  Port  Switching 

■  IP  Security  Features 

■  10/100  Base-T  Ethernet  Port 

■  Port-specific  Password  Protection 

■  Data  Rate  Conversion 

■  1 1 5/230VAC  or  -48VDC  Models 

The  SCM-16  Secure  Console  Management  Switch  provides  in-band  and 
out-of-band  access  to  RS232  console  ports  and  maintenance  ports  on  UNIX 
servers,  routers  and  any  other  network  elements  which  have  a  serial  console 
or  craft  port.  System  administrators  can  access  serial  maintenance  ports 
over  the  network  via  SSH  connections  and  simple  menu-driven  commands, 
or  through  a  discrete  TCP  port  connection  mapped  directly  to  one  of  the  Visit  website  tor  Complete  NetReach™  product  line. 

SCM-16  serial  outputs. 


There  Is  A  Better  Way  To  Troubleshoot  &  Manage  Your  Network 


OBSERVER 


OBSERVER 

SUITE 


Quickly  Pinpoint,  Pre-solve  & 
Prevent  Network  Problems 


Observer 
* 995 


Expert 
Observer 
* 2895 


Observer 
Suite 
$ 3995 


Observer® — Quickly  identifies  network 
trouble  spots  and  costs  thousands  less  than 
expensive  hardware-based  analyzers. 
Observer  provides  metrics,  capture,  and 
trending  for  both  shared  and  switched 
environments. 

•  Full  packet  capture  and  decode  for  over 
500  protocols,  including  TCP/IP  (v4  &  v6), 
NetBIOS/NetBEUI,  XolP,  SNA,  SQL,  IPX/SPX, 
Appletalk  and  many,  many  more! 

•  Switched  mode  sees  all  ports  on  a  switch 
gathering  statistics  from  an  entire  switch  or 
capture/statistics  from  any  port(s) 

•  Long-term  network  trending  collects 
statistical  data  for  days,  weeks,  months, 
even  years 

•  Real-time  statistics  include  Top  Talkers, 
Bandwidth,  Protocol  Statistics,  and 
Efficiency  History 

•  Ethernet  (10/100/Gigabit),  Token  Ring, 
FDDI,  and  Wireless  802. 1 1 — no  need  to 
purchase  separate  tools 


•  Windows®  98/Me/NT/2000/XP  compatible 

•  Over  4,000  frame  types  recognized 

Expert  Observer — Identifies  problems  and 
provides  Expert  information  in  plain  English. 

Includes  all  of  the  features  of  Observer  plus 
real-time  and  post-capture  expert  event 
identification  and  analysis — new  SQL  and 
Frame  Relay  experts  add  to  the  many  other 
protocols  covered,  time  synchronization 
technology,  and  modeling  of  network  traffic. 

Observer  Suite — The  ultimate  tool  for 
the  most  demanding  power  user. 

Provides  a  full  complement  of  tools  that 
includes  all  of  the  features  of  Expert 
Observer  plus  SNMP  management,  RMON 
console/Probe  and  Web  reporting.  Includes 
one  remote  Probe. 

If  you  have  any  network  problems,  find 
out  the  cause  with  Observer,  Expert 
Observer,  or  Observer  Suite. 


Call  800-526-7919  or  visit  us  online  for  a  full-featured  evaluation: 

www.NETWORKINSTRUMENTS.com 

US  (952)  932-9899  •  Fax  (952)  932-9545  •  UK  &  Europe  +44  (0)  1959  569880  •  Fax  +44  (0)  1959  569881 
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10/100  BaseT  Ethernet 

IP  for  HTML.  SNMP  & 
Telnet  Management 


RS-232 

Serial  Management 


Link  Port 
(daisy  chains  to) 

Expansion  Module 


^wer  Control 


Power  Tower  XL 

•  Outlet  Grouping  across 
power  circuits 

•  Input  Current  Monitor 

•  New  HTML  GUI 

•  Power-up  Sequencing 

•  Zero  U  vertical  and  Rack- 
mount  horizontal  models 

•  Add  a  second  Power  Tower 
to  manage  32  power-ports 


*  Sentry  Power  Tower. 
Equipment  Cabinet  Solutions 


Server  Technology,  Inc. 

r 

iO  Sandhill  Drive  Reno,  Nevada  8951 1  USA 
.servertech.com  toll  free:  1.800.835.1515 
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RMONS  PROBE 


Complete,  Industry  Standard,  Software-Based  RM0N2  and 
RM0N1  Probe  for  Windows  98/Me/NT/2000/XP 


’(^Network  Instruments  RMON  Probe 
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•  Low  cost  complete  RMON  monitoring  for  remote  sites  or 
segments. 

•  Software-only,  non-dedicated  data  collection. 

•  Pure,  full  RMON  1  and  2  support.  Complete  implementation  of 
both  RMON  1  and  2  for  Ethernet  (10/100)  and  Token  Ring  (4/16). 

Full  adherence  to  RFCs  1513,  1757,  2021  and  2074. 

•  Runs  as  a  service  on  Windows  NT/2000/XP. 

•  Works  with  ANY  RMON  management  console  or  collection  facility 
( Observer  \  OpenView  '  ,  Concord  *,  NetScout  ,  etc.). 

•  Compatible  with  Network  Instruments'  optimized  ErrorTrack NDIS 
drivers  display  true  errors-by-station. 

•  Multiple  concurrent  network  interface  monitoring  (up  to  10). 

Why  pay  thousands  more  for  the  same  data? 

Call  800-526-7919  for  information,  or  see  our  web  site  at: 

www.networkinstruments.com 

©  2001  Network  Instruments,  LLC  -  Corporate  Headquarters  (952)  932-9899  FAX  (952)  932-9545 
UK  and  Europe  +44  (0)  1959  569880  FAX  +44  (0)  1959  569881  info@networkinstruments.com  www  networkmstruments.com 
Network  Instruments  and  the  “N”  logo  are  registered  trademarks  of  Network  Instruments,  LLC  Minneapolis.  MN  USA 


SENSAPHONE® 

IMEH 


Sends 

SNMP 

Messages 


Monitors 

64 

IP  addresses 


Embedded 

Web 

Server 


Sends  Power  Internal 

E-Mail  Outage  UPS 

Alarming 


Power  Ethernet 
Control  Port 
Interface 


Internal  Voice, 
Modem 
&  Pager  Port 


8  R)-45  Sensor  Inputs 

(Temperature,  Humidity, 
Woter,  Motion,  Power, 
Smoke/Fire) 


Microphone 

lor  Sound 
Monitoring 


BE  NOTIFIED  BEFORE  CRITICAL  EVENTS  TURN  INTO  DISASTER! 


•  Eight  environment  inputs 

•  Power  sensing 

•  Monitors  64  IP  addresses 

•  Send  alerts  to  64  people 

•  8  methods  of  contact 

•  Calendar  scheduling 

•  Expands  to  256  sensors 

•  Remote  power  control 

•  Optional  camera 


The  Sensaphone  IMS-4000  Infrastructure 
Monitoring  System  monitors  critical  environ¬ 
mental  and  network  elements  in  your  server 
room,  data  center,  or  telecomm  installation  and 
reports  to  you  instantly  when  events  threaten 
your  infrastructure.  The  IMS-4000  keeps  watch 
so  you  don't  have  to.  See  these  features  and 
more  on  the  web  at  www.ims-4000.com 


Phonetics,  Inc. 

Tel:  877-373-2700 

901  Tryens  Road 

www.ims-4000.com 

Aston,  PA  19014 
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You  could  be  relaxing 


on  a  bed  of 
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Ultra  Link 


Connects  to  standalone  computers  or  any  KVM  switch 
High  quality  16-bit  video  at  up  to  1280x1024  resolution 

Easy  to  install,  give  it  an  IP  address  and  run  the  Viewer 
program,  no  user  license  required 

Encrypted  communication  produces  highly  secure  operation 
Scaling  and  scrolling  features  for  maximum  flexibility 
Single  mouse  cursor  simplifies  user  interface 
See  four  servers  from  one  screen  with  quad  screen  mode 
Lifetime  free  flash  upgrades 


UltraLink  sets  a  new  standard  in  remote  management  of  server  room 
environments.  It  saves  you  money  by  allowing  you  to  centralize  your  IT 
resources.  Since  it  does  not  depend  upon  software  loaded  on  your 
computers,  it  deploys  easily  and  works  on  any  operating  system,  such 
as  Windows,  Linux,  Solaris,  Unix,  or  OSX. 

The  UltraLink  digitizes  the  remote  computer's  video.  It  then  scales, 
compresses,  encrypts,  and  packetizes  it  into  the  TCP/IP  protocol.  At 
your  PC  the  free  Viewer  application  receives  and  displays  the  video  and 
sends  back  keyboard  and  mouse  data.  This  process  allow  you  to  access 
remote  computers  from  anywhere. 

Rose  is  a  leading  manufacturer  of  switching,  extension,  and  access 
products.  As  a  KVM  industry  pioneer,  Rose  is  known  for  its  technically 
superior  and  price  competitive  products. 

Join  the  ranks  of  many  successful  companies  using  UltraLink,  call  Rose 
to  learn  more  about  KVM  Access  over  IP  as  well  as  KVM  Switches  and 
Extenders. 


Rose  Electronics 
10707  Stancliff  Road 
Houston,  TX  77099 

USA  toll  free  800  333  9343 
ROSE  US  281  933  7673 
ROSE  Europe  +44  (0)  1264  850574 
ROSE  Asia  +617  3427  5353 

WWW.ROSE.COM 
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Intrusion  Prevention 
for  Microsoft  Web  Servers 


SecurellS™  Web  Server  Protection 

•  Requires  No  Signature  Database  Updates  •  Shields  Against  All  Classes  of  Attack 

•  Simple,  Powerful  GUI  •  Protects  Without  Disabling  IIS  Functionality 

•  Central  Policy  Management  •  RFC  Compliancy  Checking 


el  ye  Security  Luirvuie 


BA  Vjew  I©ol*  Action  Heto 
Seej’eUS  SteSenH*  ►  ■  Ftettentor  §* 


-inixi 


:H»1S 


3/27/2003  214.47  PM 
3/27/2003  214  47  PM 
3/27/2003  214.47  PM 
3/27/2003  2 14  47  PM 
3/27/2003  214:47  PM 
3/27/2003214:47  PM 
3/27/2003  214-48  PM 
3/27/2003  214.48  PM 
3/27/2003  214  48  PM 
3/27/2003  214.46  PM 

3/27/2003  M  4- 48  PM 
3/27/2003  21 4: 48  PM 
3/27/2003  214-48  PM 
3/27/2003  214.48  PM 
3/27/2003  214-48  PM 


!  SltS-FLI  -64 
1  SltS  TIT -64 
SIIS-FLT -64 
■SIIS  FLT-01 
j  SIIS  FIT  64 
:  SIIS-FLT  €4 
!  SIIS-FLT  -64 
lsiB-FLT-64 
,  SIIS-FLT  -64 
SHS-FLT-64 

;  SIIS-FLT  -64 
SUS  HI  64 
;  SIIS-FLT -64 
SllS-FLT-64 
SIIS  FLT-01 

02  d  336  »l»>l 


Wtmng 

Warning 

Waring 

Warryng 

Warning 

Warring 

Warning 

Warring 

Warring 

Warring 

Warring 

Warring 

Waning 

Warnng 

Waning 


HT  TP  RFC  Votelcr. 
*  HI  TP  RFC  VWalion 
HTTP  RFcVwdioR 
Patti  Picitaciion 
HTTP  RFC  Violation 
HTTP  RFC  Violatcn 
HTTP  RFC  Violation 
HTTP  RFC  Violation 
HTTP  RFC  Violatcn 
HTTP  RFC  Violation 

HTTP  RFC  Vbla'iori 
HTTP  RFC  Violator 
HTTP  RFC  Violator 
Hi  TP  RFC  Violator 
Path  Protection 


cated  in  Port  Queiy  viath  (»licy  vi... 
Fated  in  Po*t  Queiy  with  potty  vi 
F  a  ted  in  Port  Queiy  *wth  policy  vi. 
Fated  in  URL  Specter  vwlh  poky 
Fated  in  Port  Quety  wih  policy  vi 
Fated  m  Port  Queiy  w<h  polty  vi. 

F  a  ted  m  Port  Queiy  wih  policy  vi 
F  a  ted  m  Port  Queiy  rath  policy  vi.  , 
Faied  in  Port  Queiy  wih  polcy  vi 
F  a  ted  in  Pott  Queiy  with  polcy  w 


:Hidi  |VteblD1 
High  'Web  ID  1 
High  Web  ID  1 
Mbdicrn  Web  ID  1 


Web  ID  1 
I  Web  ID  1 
'Web  ID  1 
JwSb  iD  1 
i  Web  ID  1 


RFC  Violation 
RFC  Violator 
RFC  Violator 
FteNotFamd 
RFC  Violation 
RFC  Violator 
RFC  Violation 
RFC  Violation 
RFC  Vblaton 
RFC  Viator 


.200303. 
'200303  " 
200303. 
200303  _ 
200303 
-200303 
200303 
200303 
200303  ' 
.200303... 


F  a  ted  in  Port  Queiy  wih  policy  vi  High 
F ated  m  Peat  Queiy  wehpiicy  vi  High 
F aled  m  Pott  Queiy  with  policy  vi  Hi^. 
F  ated  in  Port  Queiy  w<h  policy  m  High 


Web  ID  1  RFC  Violator  200303 
WnbiDI  RFCVdatnn  200300 
Web  ID  1  :  RFC  Volution  200303 
Web  ID  1  !  RFC  Violator  200303 


Faied  in  URL  Specter  with  polcy  Median  'Web  ID  1  j  Fie  Not  Found  200303 


HTTP  RFC  Violation  :  RFC  Violation 


tvete  ID:  SIIS-FLT-64 
Website:  Wets  ZD  z 

Refeience  ID:  20030327849207 
Agent:  secure  IIS  2.0.3 
Remote  IP:  192.168.1.16 
Souice  Date:  HTTP/  1 .0 

Reason:  Feiiect  in  Vmz itykFC (bad  Ante  tteiliag  HTTP/1. X  -  No  Uaecnoent) 


3/27/2003  2:14:48  PM  E 


j 


Download  a  FREE  Whitepaper  and  FREE  Trial  of  SecurellS: 
www.eEye.com/FreeSecurellS  or  call  866.282.8276 


SecurellS  delivers  proven  security  for  blocking  known  and 

<G> 

unknown  attacks  from  penetrating  Microsoft  IIS  servers. 

eEye*  Digital  Security 

Cisco 

Routers 


Switches 

Hubs 

Voice  Over  IP 

Memory 

Security 

Interface  Modules 


World  Data  Products  introduces  its  new  Cisco 
Router  and  Switch  poster.  It  provides  at-a-glance 
information  on  model  capacities,  interface  cards 
and  available  features. 

The  Cisco  Poster  is  a 
valuable  tool  for 
network  planning. 

Call  877.231.2451  or 
visit  www.wdpi.com 
to  request  your 
FREE  Cisco  Router  ■ 

and  Switch  poster. 


Port  Adapters 
Wireless 


Buy  •  Sell  •  Lease  •  Repair  •  New  •  Refurbished  •  Used 
www.wdpi.com  •  877.231.2451  •  cisco@wdpi.com 

121  Cheshire  Lane,  Minnetonka,  MN  55305  U.S.A. 


We  Buy  &  Sell 
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Overnight  Delivery 
90-day  Guarantee 
40%-90%  off  List  Price 


FREE  Gift 
With  Every 
Purchase 


Orr'i:i  J>f  A  e!  wrfrj. 


m.  C  ; 


We  Buy  &  Sell 

USED 

CISCO 

Juniper 

Extreme 

800.451.3407 

Since  1985 

50-90%  Savings 
Fully  Guaranteed 
Overnight  Delivery 

networkhardware.com 


sales@digitalwarehouse.com 


DIGITAL 

WAREHOUSE. 

The  No  1  Source  for  Used  Cisco  Direct 


Toll  Free  1-866-442-7767 
www.smartronix.com/products 
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Systems/Features/Memory 

cisrco 

EQUIPMENT 

Also  Available:  wellfleet,  Bay,  Fore, 
Xylogics,  Livingston,  &  Ascend 

in  Stock  •  Fast  Delivery  •  No  Expedite  Charges 

COMSTAR,  INC. 

The  Hi  Network  Remarketer 

952*835*5502 

Fax  952*835*1927  E-Mail  salesecomstarlnc  com 


SERVER  ROOM 

Temperature 

Sensors 

wmvLim  w’ 


Multiple  Models  Including: 

THL-100 

(Battery  powered) 

THL-100  AC/DC 

(Continuous  monitoring) 

THL-100  AC/DC  Plus 

(Email  alarms) 

►  Records  Temperature,  Humidity  &  Light 

►  Time  Stamped  Data  for  Detailed  Analysis 

►  Windows-based  SmartSensor  Software 

•Data  or  graphical  view 
•Easily  exports  to  common  spreadsheet 
software 


CISCO  NORTEL 

NEW  •  REFURB  /  BUY  •  SELL 


Truckload 

Sale 


Cisco  Srsuas 


NGRTEL 

NETWORKS 


ajll!  Bay  Networks 

Fax  Equipment  List  To  801-377-0078 


888-8LANWAN  gM 

Call  lor  Free  Quote!  (888'852~6926)  www.nle.com 


Comsystel  Inc. 

NETWORK  EQUIPMENT 

WE  SPECIALIZE  IN  SELLING 

CISCO 

WE  OFFER: 

•  DOMESTIC  te 
INTERNATIONAL  SALES 

•  REST  PRICES 

•  FAST  SHIPPING 

•  BEST  QUALITY 

•  ALL  PRODUCTS  GUARANTEED 

For  more  information  contact 
Shumon:  SaIes@Networkdeal.com 
1 2686  Hoover  Street. 

Garden  Grove.  CA  9284 1 
Ph.  714-899-0855  Fax  714-899-0825 


WWW.NETWORKDEAL.COM 


USED 

AUTHORIZED  RESELLER 
Access/Routers/Switches 
Cisco  Livingston  Ascend 
3Com  US  Robotics  Kentrox 
Adtran  BayNetworks  Xyplex 
Computone  Digital  Link 
Modems  /  DSU  /  Muxes 
IBM  UDS  Codex  Hayes  GDC 
Micom  Microcom  Paradyne 
ATT  MultiTech  Penril 
Racal  Telebit  Zoom 

WE  BUY  AND  SELL 
www.wrca.net 

800-699-9722 
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Contact  these  companies  today  to  help  you  with  your  training  needs! 


Measurellp 

(678)  356-5000 
|  www.measureup.com 
Certification  Practice  Tests 


I  Transcender 

(615)  726-8779 
I  www.transcender.com 
|  Award-winning  practice  exams 
for  IT  certification 

Learnkey,  Inc. 

(800)  865-0165 
I  www.leamkey.com 
Self-paced  online  CD  network 
certification  developer  bus/apps 

CBT  Nuggets 

(888)  507-6283  &  (541)  284-5522 
|  www.cbtnuggets.com 
Inexpensive  training  videos  on  CD. 

|  MCSE,  MCDBA,  MCSD,  Cisco  CCNA,  Linux,  A+,  Net+ 

IPexpert,  Inc. 

(866)  225-8064 
j  www.ipexpert.net 
CCIE  (R&S,  SEC,  and  C&S),  CCSP, 

CCNP,  CCNA,  and  IP  TELEPHONY _ 

io  Aws-z  'Join  iliiliij  JJujfsjt 

' 
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NetSmart  Learning  Partner 


Advertise  in  the  Marketplace 
and  watch  yuur  sales  come 
pouring  in! 

C  al!  Direct  Response  Advertising 

1-800-622-1108 


CISCO 


Certified-As-New 


One-Year  Warranty 

►  Largest  warehouse  of  used  Cisco 

►  Highest  quality  and  lowest  prices 

►  Over  5000  satisfied  customers 

Call  or  email  for  a  fast  quote. 

800.439.8558 


Advertising  Supplement 


When  the  Information  Technology  Association 

met  earlier  this  month  for  the  annual  Workforce 
Convocation,  there  were  two  critical  items  for 
consideration  -  the  state  of  the  IT  workforce  and  the  report  of  a 
Blue  Ribbon  Panel  on  Diversity. 

In  its  annual  survey  of  400  hiring  managers,  ITAA  found 
that  the  employment  bounce  back  predicted  a  year  ago  didn’t 
bounce.  However,  the  same  hiring  managers  say  the  downsizing  era 
seems  to  be  at  an  end.  At  year-end  2002, 10.2  million  people  were 
employed  in  IT  in  the  United  States  -  about  even  with  employment 
figures  for  2000.  And  just  over  400,000  new  jobs  are  planned  for 
2003  -  slow  but  steady  growth  compared  to  the  exponential  growth 
of  the  past.  The  key  skills  needed  are  in  programming/software 
engineering,  technical  support  to  capitalize  on  new  IT  solutions 
and  enterprise  management  implementation  and  improvement. 

Blue  Ribbon  Panel  Report  on  Diversity 

Demographic  representation  by  percentage  of  total  IT  professionals 
Source:  ITAA  2003 
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Nine  of  10  workers  will  support  banks,  insurance  companies, 
manufacturing  companies  or  other  non-IT  businesses. 

In  the  midst  of  this  maturing  of  the  IT  workforce,  the  ITAA 
also  issued  three  priorities  with  regard  to  diversity.  According  to 
Bob  Knowling,  chairman  of  SimDesk  Technologies  and  chairman  of 
the  ITAA  panel,  the  Blue  Ribbon  Panel’s  priorities  aren’t  “very  pro¬ 
vocative.”  However,  Knowling  is  challenging  IT  leaders  and  human 
resources  professionals  to  take  provocative  action.  “The  only  way 
I  have  ever  seen  a  company  change  its  face  is  through  the  will  of 
the  CEO  and  board,”  says  Knowling.  “The  rest  of  the  work  in  this 
report  is  window  dressing  if  there  isn’t  support  and  commitment  at 
the  top,  including  making  sure  you  have  charged  executives  with 
performance  improvement  in  this  particular  area  and  link  their  pay 
to  improvement. 

“We  -  in  this  report  -  are  on  spot  with  the  diagnoses  and 
have  to  admit  that  these  are  merely  practical 
steps,”  adds  Knowling.  “There  will  be  more  than 
400,000  new  jobs  this  year.  We  must  have  the 
dialogue  that  this  is  a  business  imperative.  Left  to 
our  own  devices,  we  fill  the  jobs  around  us  with 
people  who  look  like  us  -  it’s  an  orientation,  not 
racism.  But  I’ve  seen  first-hand  what  can  happen 
when  the  executive  suite  reflects  that  commit¬ 
ment  to  diversity.  The  organization  grows  by 
leaps  and  bounds  when  women  and  people  of 
color  show  up.” 

The  second  priority  in  the  report  is  to 
increase  corporate  outreach  and  mentoring.  To 
assist,  the  Blue  Ribbon  Panel  issued  a  list  of  best- 
in-class  examples.  Specifically,  the  committee 
called  for  establishing  professional  forums  that 
bring  together  diverse  IT  professionals  and  pro¬ 


vide  support  to  such  groups  as  Black  Data  Processing  Association, 
Women  in  Technology,  the  National  Association  of  Female 
Executives  and  the  Society  for  Hispanic  Professional  Engineers. 

The  final  priority,  fostering  stronger  partnerships  with  col¬ 
leges  and  universities,  deals  with  the  pipeline  of  talent  and  the 
future.  “We’ve  seen  some  incremental  improvements  for  women 
and  Hispanics  over  the  past  eight  years,  and  we’ve  seen  improve¬ 
ment  in  the  number  of  women  and  minorities  occupying  seats  in 
undergraduate  IT-related  studies,”  Knowling  says.  “However,  these 
enrollment  figures  aren't  translating  to  placement  in  the  professior 
The  result  is  that  we  have  a  mass  of  people  who  are  opting  out  of 
IT  and  choosing  other  fields  not  because  they  don’t  want  to  be  an 
engineer  but  because  they  don't  have  access." 

Among  the  barriers  identified  in  pursuit  of  an  IT  career  is  th< 
perception  that  the  profession  is  one  of  isolation/working  alone, 
24/7  and  instability.  Reality,  according  to  the  report,  is  that  creating 
and  innovating  are  team  efforts,  that  there  is  a  direct  line  between 
IT  development  and  business  performance,  and  that  the  majority 
of  organizations  are  committed  to  a  balance  between  work  and 
personal  life. 

For  the  full  report  and  best-in-class  action  steps,  go  to 
www.itaa.org/workforce. 


IT  Careers 

For  information  on  recruitment  advertising, 
Please  contact:  Nancy  J.  Percival, 

Director,  Recruitment  Advertising, 
at  800-762-2977 
500  Old  Connecticut  Path 
Framingham,  MA  01701 
Produced  by  Carole  R.  Hedden 
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SYNAPSE  GROUP,  INC.,  a  lead¬ 
ing  computerized  magazine  mar¬ 
keting  company,  is  looking  to  hire 
a  qualified  PROGRAMMER  ANA¬ 
LYST.  to  plan,  develop,  test,  doc¬ 
ument  and  update  computer  pro¬ 
grams  to  increase  operating  effi¬ 
ciency;  to  enter  program  codes 
into  computer  systems;  to  evalu¬ 
ate  user  requirements;  and  to 
monitor  performance  and  provide 
technical  assistance  to  program 
users.  Qualified  applicants  are 
required  to  possess  at  least  a 
Bachelors  degree  in  Computer 
Science  or  it's  equivalent.  Sound 
knowledge  in  internet  applica¬ 
tions,  HTML,  SQL,  C++  .  Oracle 
and  Oracle  Web  server  preferred. 
The  company  offers  a  competitive 
compensation/benefit  package 
and  an  environment  where  ach¬ 
ievements  are  recognized  &  pro¬ 
fessional  growth  is  encouraged. 
Qualified  applicants  are  encour¬ 
aged  to  mail  resumes  to: 
Department  of  Human  Resources, 
Synapse  Group.  Inc.,  Four  High 
Ridge  Park,  Stamford,  CT  06905. 


Programmer  Analyst:  Develop 
/implement  applications  for  elec¬ 
tronic  document  mgmt  and  data¬ 
base  systems  on  Windows/  Unix 
platforms  Will  create  cus¬ 
tomized  imaging  database  file 
search  applications  using 
Oracle,  MS/SQL  Server,  and 
Access  2000;  develop  web  data¬ 
base  data  warehouse  applica¬ 
tions  using  XML.  JavaScript, 
OLAP  Services  and  DTS;  per¬ 
form  systems  integration 
according  to  HIPAA  implementa¬ 
tion  guides;  and  provide  other 
technical  support.  Requires  BS 
in  Computer  Science.  EE  or 
MIS.  Full-time,  competitive 
salary  Apply  to:  HR  at  QFlow 
Systems,  LLC,  9317 
Manchester  Rd.,  St.  Louis.  MO 
63119.  No  Calls.  EOE. 


UNIX  ADMINISTRATOR.  Support 
UNIX  system,  including  design,  set¬ 
up.  configuration,  and  administra¬ 
tion.  Administer  SAN  environment 
with  EMC  Storage  and  Brocade 
switches,  using  EMC  Symmetrix 
and  Clariion  Storage  products  in  a 
heterogeneous  environment.  Ad¬ 
minister  effective  backup  and 
restore  function,  using  Veritas 
NetBackup  DataCenter.  On-going 
technical  support,  troubleshooting, 
performance  management,  capaci¬ 
ty  planning  and  Disaster  recovery 
planning/testing.  Requires:  B.S. 
Management  Information  Systems, 
Computer  Science,  or  a  related 
field;  4  years  experience  as  UNIX 
System  Administrator  using  HP 
9000  class  servers  and  HP-UX 
10.2,  11.0  and  1 1  i.;  experience 
must  include  configuration  and 
administration  of  EMC  Symmetrix 
and  Clariion  FC-4700,  Veritas 
NetBackup  DataCenter  and  SAN 
with  Brocade  3800  switches.  Must 
have  current  authorization  to  be 
permanently  employed  in  the 
United  States.  Send  resume  to 
Dawn  Griffin,  DRA,  2902  Enterprise 
Drive,  Anderson,  IN  46013. 


SENIOR  SOFTWARE  ENGI¬ 
NEER  to  provide  on-site  consul¬ 
tancy  to  design,  develop,  ana¬ 
lyze  and  test  software  systems 
for  web  design  applications 
using  Java,  HTML,  Java  Script 
and  CG/Pert;  develop  e-com¬ 
merce  application  systems  using 
Java  internet  technologies  such 
as  Servlets,  JSP,  EJB,  RMI  and 
CORBA  on  Windows  and  Unix 
operating  systems.  Require: 
M.S.  in  Computer  Science 
/Electronics  Engineering  and 
two  years  experience  in  the  job 
offered  or  as  Programmer/ 
Analyst.  40  %  travel  to  client 
sites  within  the  United  States. 
Competitive  salary  and  benefits, 
40  hours/week,  M/F,  8  am  to  5 
pm.  Apply  with  resume  to: 
President.  ObjectNet  Tech¬ 
nologies.  Inc.,  1117  Perimeter 
Center  West,  Suite  N402, 
Atlanta,  GA  30338. 


Position  opening  for  IT 
Professionals,  Internet/Web 
Programmer  Analysts,  who  must 
have  M.S  or  B.S  or  equiv.  In  C/S 
or  Eng'g  (any  branch)  or  Math  or 
Bus.  Admin.  Or  related  field  &  2 
yrs  exp  in  either  (a)  or  (b)  or(c) 
or  (e)  or  (f)  or  (g)  as  follows:  (a) 
Siebel,  Vitria  Business  Ware 
3.1.7,  XSU,  Geneva,  Rational 
Rose  Enterprise,  SEI  CMM 
Level  5,  Sun  Solaris;  (b)  HP-UX, 
WSAD,  Total,  Stratus  Cobol, 
NuGenesis,  ECCSS,  ON/2;  (c) 
ATG  Dynamo,  SCCS,  Informix 
7.6,  Jrun  4.0,  Solaris  5.6,  XSL; 
(d)  Oracle  Applications,  SQL 
Navigator  4,  Web  DB,  Linix, 
Jboss,  J2SE,  (e)  Peoplesoft  8, 
People  Tools  8.12,  SQR  4.3.2, 
Convoy,  HP-Vectra,  Message 
Agent,  Data  Mover  n  Vision, 
Mass  Change;  (0  HP-Ux, 
Business  Objects  5.14,  Web 
Intelligence  2.7,  Informatica, 
Powermart  4.7,  ZABO. Please 
send  resumes  only  to  HR,  STS 
Inc,  105  Nobel  Ct,  Alpharetta, 
GA  30005. 


Quality  Control  Engineer:  Works 
under  supervision  of  sr.  mngmt 
to  plan/direct  development/ 
application/  maintenance  of 
quality  stds.  for  JPEG/ 
QuickTime  on  Macintosh/ 
Windows;  use  C++  under  MS 
Visual  Studio/Metrowerks  envi¬ 
ronments  to  develop/employ 
stds./tools/  for  insp./evaluation 
of  vector/raster/imaging/  anima¬ 
tion  files  SW;  establish  program 
to  evaluateaccuracy/efficiency 
of/client  satisfaction  with 
image/graphics  SW;  develop 
training  material.  Req.  Bach,  in 
Comp.  Eng.  rel.  or  equiv.  &  1 
year  exp.  in  job  or  in  Software 
development  (complex  image/ 
graphics  software).  Resume  to 
J.  Miranda,  Deneba  Software, 
Inc.,  1150  N.W.  72nd  Ave.,  Ste 
180,  Miami,  FL  33126.  No  Calls. 


TRANSMISSIONS  REMANUFAC¬ 
TURING  PROGRAM  MANAGER. 
Will  provide  mechanical  engineering 
support  to  customers  for  remanufac¬ 
ture  of  automotive  transmissions;  in¬ 
cluding  bill  of  material  charge  contr¬ 
ol,  engineering  specification  chang¬ 
es,  cost  reduction  activities,  yearly 
validations,  and  new  product  launch¬ 
es,  working  at  various  unidentified 
assigned  sites  within  U.S.  Will  coor¬ 
dinate  and  facilitate  automotive  tran¬ 
smission  remanufacturing  programs 
following  Advance  Part  Quality  Plan¬ 
ning  (APQP)  and  Production  Part 
Approval  Process  (PPAP)  quality 
programs.  Will  review  and  track  part 
design  changes  and  product  and 
process  changes,  and  will  obtain  en¬ 
gineering  approvals  and  make  nec¬ 
essary  changes  to  Bill  of  Materials 
and  change  log.  Requires:  B.S.  in 
Mechanical  Engineering  or  equiva¬ 
lent;  8  years  Mechanical  Engineer¬ 
ing  experience  in  automotive  indust¬ 
ry;  experience  must  include  engin¬ 
eering  of  transmission  internal  struc¬ 
ture,  of  production  processes  and 
tooling  used  for  transmission  assem¬ 
bly,  and  of  quality  processes  for  re¬ 
manufactured  products.  Must  have 
current  authorization  to  be  perman¬ 
ently  employed  in  the  United  States. 
Send  resume  with  SSN  to  Tanya 
Lawson,  Williams  Technologies, 
P.O.  Box  1548,  Summerville,  SC 
29484-1548. 


Systems  Analyst  (Georgia): 
Analyze  user  requirements,  pro¬ 
cedures,  and  problems  to  auto¬ 
mate  or  improve  existing  sys¬ 
tems.  Design,  code  and  test  GUI 
using  C++,  UNIX,  ORACLE, 
AS/400  (RPG,  CL,  DB2/400), 
IBM  AAS/400,  OS/400,  RPG- 
ILE,  RPG/400,  CL/400, 

TSO/ISPF,  JCL,  IDMS,  CICS, 
and  COBOL.  Telecom  software 
and  products  experience  is  a 
must,  generally  in  the  areas  of 
customer  care  and  billing.  BS  in 
Computer  Science,  any 
Engineering  or  equivalent  and 
relevant  experience.  Send 
resume  to  Vivian  Fernandes, 
Manager  Resources,  MBT 
International,  Inc.,  400 
Perimeter  Center  Terrace.  NE, 
Suite  900,  Atlanta.  GA  30346,  or 
e-mail: 

career@us.mahindrabt.com 


Technical  Consultant  (Atlanta,  GA) 
As  product  consultant,  meet  with 
company  prospects  and  customers 
to  ensure  understanding  of  applica¬ 
tions  architecture,  development 
tools,  hardware  requirements  and 
deployment  options.  Develop  ex¬ 
pertise  in  latest  technical  enhance¬ 
ments  to  company  products,  as 
well  as  products  used  in  company 
applications.  Research  and  devel¬ 
op  technical  responses  to  customer 
requirements.  Prepare  and  present 
technical  product  review  sessions: 
prepare  presentation  materials, 
research  responses  and  reports. 
Analyze  customer  requirements  to 
size  databases,  propose  hardware 
configurations,  and  customize  to 
industry-specific  business  require¬ 
ments.  Provide  in-depth  technical 
product  knowledge  during  imple¬ 
mentation.  Contribute  to  product 
development  process  and  update 
implementation  process.  Require¬ 
ments:  Bachelor  s  or  equivalent  de¬ 
gree*  in  Computer  Science,  Man¬ 
agement  or  Business  Information 
Systems  or  related  field.  (*as  deter¬ 
mined  by  a  recognized  credentials 
evaluator)  and  three  years  experi¬ 
ence  in  job  offered  or  related  occu¬ 
pation  such  as  computer  systems 
integration/implementation. 
Competitive  salary  offered.  Apply 
on-line  at  www.retek.com/aoPlv 
Be  sure  to  include  CompWorld  as 
the  source  code. 


Director  of  Inti  Sales  Opera¬ 
tions  -  Asia  Pacific  wanted  by  a 
Telecommunications  co.  in 
Newark,  NJ.  Must  have  a 
Bachelor  s  degree  in  Manage¬ 
ment  or  related  field  &  5  yrs. 
exp.  as  a  Director,  Int  I  Market- 
ing/Mngr.  Sales  &  Marketing. 
Exp.  must  include:  5  yrs.  of  Int  I 
Sales  exp.  specifically  in  the 
Asian  Region  and  1  yr.  exp.  in 
communication  related  distribu¬ 
tion  in  the  Asian  Region.  Please 
respond  to  Net2Phone,  Inc,  520 
Broad  Street,  Newark,  NJ 
07102  Attn:  Melinda  Pollard 
reference  #  0022077. 


Software  Engineer-Design  and 
develop  software  based  upon 
functional  specifications  for  VoIP 
Test  Equipment.  Participate  in 
the  functional  descriptions  of 
products.  Act  as  Technical 
Leader  overseeing  a  group  of 
engineers.  Troubleshoot  prob¬ 
lems  either  locally  or  at  cus¬ 
tomer  sites.  Work  on  the  integra¬ 
tion  of  Telecom/VolP  protocols 
(H.323,  SIP,  H.248,  MEGACO, 
SS7,  TCAP,  ISDN).  Responsible 
for  application  development  that 
involves  switches,  gateways, 
SS7  components  and  familiarity 
with  ITU  and  IETF  standards. 
Integrate  a  VoIP  protocol  as 
defined  by  an  ITU  standard  into 
an  existing  server  framework. 
Requirements  include  a  Mas¬ 
ter's  degree  or  equivalent  in 
Computer  Science,  an  Eng¬ 
ineering  discipline  or  related 
field  and  five  years  of  work 
experience  in  the  job  offered  or 
related  field  of  software  engi¬ 
neering.  Applicants  must  have 
unrestricted  authorization  to 
work  in  the  United  States.  Salary 
$95, 000/year.  40  hours/wk. 

Respond  with  two  copies  of 
resume  to  Case  #200201417, 
Labor  Exchange  Office,  19 
Staniford  St.,  1st  FL,  Boston.  MA 
02114. 


Database  Administrator.  (NY,  NY) 
Design  &  administer  database 
solutions.  Perform  all  aspects  of 
Oracle,  NT  &  UNIX  admin,  incl. 
installation,  tuning,  migration, 
space  mgmt,  backup  &  recovery 
Design  database  solutions  using 
bstat/estat,  PL/SQL  coding,  SQL 
Loader  &  clustering/replication  on 
UNIX/  NT  platform  Design  & 
implement  UNIX  Shell  &  NT 
batch  scripts/tools  Coordinate  w/ 
techn  project  mgrs,  PL/SQL  dvl- 
prs  and  DBA  team  to  confirm 
web-feasibility  &  efficiency  Req 
Master's  in  Comp.  Sci  or  Comp 
Appl.  or  foreign  degree  equiv  &  2 
yrs  exp.  in  job  offered  Send 
resume  to:  HR, 

WeightWatchers.com,  888  7th 
Ave.  8th  FI,  NY,  NY  10106. 
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careers 


it  careers.com 


SBC  CommNhtions  is  an  Equal  Opportunity  Employelr^ 

All  qualified  applicants  will  receive  full  and  fair  consideration  for  employment. 


COMPUTER 
PROGRAMMER  IV 

Bethesda,  MD 


MILLIONS  OF 
READERS 

MILLIONS  OF 
SURFERS 


ONLY 
THOUSANDS 
OF  DOLLARS 

TOTAL  IMPACT 
TOTAL 
SAVINGS 

Put  your  message  in 
ITcareers  and 
IT careers.com  and 
reach  the  world’s 
best  IT  talent. 


ITcareers 

whar*  tha  bast  gat  better 
1  800-782-2977 


Sometimes  our  single  greatest  idea 
is  born  of  many  great  minds. 


Brainstorms.  Think  tanks.  Discussions.  They  go  by 
different  names,  but  they  all  perform  a  similar  task  - 
turning  good  ideas  into  great  ones.  At  SBC,  we're 
always  searching  for  talented  professionals  who  have 
the  ability  to  develop  new  solutions,  and  drive  them 
to  revolutionary  results  through  teamwork  and 
collaboration.  We're  one  great  company.  Shaped  by 
180,000  great  people. 


Join  the  telecommunications  company  voted  "America's 
Most  Admired"  by  Fortune  magazine.  Check  us  out  at 

www.sbc.com/careers.  Or  visit  our 
diversity  site  at  www.sbcdiversity.com. 


[SBC 


COMPUTER  PROGRAMMERS 
(2D-3D  GRAPHICS)  -  A  Boston- 
area  company  engaged  in  the 
design,  development,  and  sale  of 
state-of-the-art  software  that  en¬ 
ables  the  communication  of  2D  and 
3D  technical  data  across  computer 
networks,  has  an  immediate  need 
for  two  (2)  highly  skilled  Computer 
Programmers  (2D-3D  Graphics). 
These  unsupported,  mentor-level 
positions  involve  the  programming 
and  implementation  of  software 
and  algonthms  which  simplify,  com¬ 
press  and  transmit  2D  and  3D  tech¬ 
nical  CAD  data,  from  input  format 
specification  to  final  presentation  to 
the  user  Minimum  educational 
requirements  include  a  Bachelors 
degree  in  Computer  Science,  Math¬ 
ematics.  or  other  relevant  major. 
Minimum  experience  required  is 
eight  (8)  years  industry  experience 
as  a  senior-level  programmer/ 
developer  of  2D-3D  CAD/CAM- 
related  systems.  Specifically  re¬ 
quired  is  the  demonstrated  ability  to 
program  high  quality  software  sys¬ 
tems  for  high-cost-per-error  envi¬ 
ronments  (JIT  supply  chains,  geo¬ 
metric  surface  milling,  etc  ).  Also 
required  is  the  demonstrated  ability 
to  develop  algorithms  which  trans¬ 
form  mathematical  geometric  rep¬ 
resentations  into  computer-manip- 
ulable  tessellations  Additionally  re¬ 
quired  is  the  demonstrated  ability  to 
develop  compilers  for  geometric 
data  Further  required  is  the  dem¬ 
onstrated  ability  to  develop  com¬ 
mercial  CAD/CAM-related  software 
for  UNIX-based  platforms.  Finally 
required  is  the  demonstrated  ability 
to  optimize  and  configure  TCP/IP 
network  c  ommunications  to  deliver 
geometric  data  Base  salary  is 
$90,100  per  year,  together  with 
three  (3)  weeks  annual  vacation, 
full  health  and  cental  plans,  and 
ohier  industry-competitive  benefits 
Qualified  applicants  respond  with 
two  (2)  copies  of  resume  only  to 
Case  V  200201322  Labor  Ex¬ 
change  Office  19  Stamford  Street. 
|1®  Floor.  Boston.  MA  02114.  An 
Icoe.'MfHv 


Consultant  Software  Engineer  to 
serve  as  an  expert  technical  re¬ 
source  across  functional  organiza¬ 
tions  to  perform  functional  analysis 
for  major  projects  supporting  sever¬ 
al  corporate  initiatives  by  analyzing 
and  designing  these  projects.  Will 
apply  in-depth  understanding  of  the 
business  for  which  the  application  is 
designed  including  establishing  and 
monitoring  project  plans.  Will  over¬ 
see  and  establish  the  project  devel¬ 
opment  life-cycle  by  providing  sup¬ 
port  and  expertise  throughout  all 
phases  of  project  completion.  Will 
develop  and  design  applications  as 
well  as  work  with  a  database  team 
to  drive  data  or  database  design  for 
major  projects  and  subsystems.  Will 
also  maintain  external/user  group 
relationships,  manage  vendor  rela¬ 
tionships,  and  work  directly  with  the 
user  community  for  project  defini¬ 
tion  on  critical  projects.  Will  work 
across  functional  organizations  to 
address  and  provide  technical  eval¬ 
uation  estimates  on  technology  ini¬ 
tiatives  for  the  company.  Will  initiate 
projects  or  strategy  discussions  with 
users  or  external  groups,  bringing 
issues  to  resolution.  Will  act  as  a 
primary  liaison  for  business  units  to 
resolve  various  project  and  technol¬ 
ogy  issues.  Will  serve  as  a  techni¬ 
cal  leader  on  resolution  of  corpo¬ 
rate-wide  business  needs  technolo¬ 
gy  projects.  Will  be  responsible  for 
performing  testing/QA,  creating  sys¬ 
tem  test  plans  for  complex  modules 
and  applications,  and  planning  and 
conducting  system  testing  and  user 
acceptance  testing.  Requires  Bach¬ 
elor  s  degree  in  Computer  Science. 
Engineering,  Mathematics,  or  Phys¬ 
ics  and  four  (4)  years  experience  in 
job  offered  OR  four  (4)  years  expe¬ 
rience  in  software  development 
Candidate  must  also  possess  dem¬ 
onstrated  exp  in  Oracle  and  Informix 
database  analysis  and  design  and 
demonstrated  expertise  developing 
datawarehouse  applications.  Salary 
$90.500/yr,  Mon-Fri,  9:00AM- 
5  00PM  Submit  two  copies  of  resu¬ 
me  to  Case  #  200116228,  Labor 
Exchange  Office,  19  Stamford  St.. 
1st  fl  Boston.  MA  02114  EOE 
Applicants  must  be  eligible  to 
accept  full-time  employment  in  U  S. 


Lead  Software  Engineer.  To  lead 
a  team  of  software  engineers 
responsible  for  development 
and  maintaining  database  prod¬ 
ucts  using  SQL,  C++  and  Visual 
Basic  to  be  used  by  Chinese 
and  Japanese  speaking  cus¬ 
tomers.  Will  code  the  conver¬ 
sion  routine  between  DBCS  and 
Unicode  set  by  using  C++  to 
support  Chinese  and  Japanese 
database  systems  and  translate 
database  messages  from 
English  to  Chinese  and 
Japanese.  Consult  with 
Chinese  and  Japanese  cus¬ 
tomers  with  respect  to  the  data¬ 
base  products.  Must  have 
bachelor  or  foreign  equivalent 
degree  in  computer  science, 
computer  engineering  or  related 
field.  Must  have  2  !4  years 
experience  in  writing  programs 
in  Chinese  and  Japanese  com¬ 
puter  codes.  Fluent  in  spoken 
and  written  Chinese  and 
Japanese.  40hrs/wk.  8:30  am  to 
5:30  pm.  $83,388/yr.  Employer 
Paid  Ad.  Send  resumes  to 
MDCD/ESA,  P.O.  Box  11170, 
Detroit,  Ml  48202-1170. 
Reference  No.  210355. 


Market  Research  Analyst 
sought  by  New  Jersey-based 
s/ware  consulting  firm  to 
research,  analyze,  design,  and 
implement  mktg  strategies  and 
business  policies  in  IT  sector. 
Must  have  a  Bach  or  equiv  in 
Comp  Sci.  or  Electronics,  with 
5  yrs  exp  in  mktg  and  s/ware 
tehnologies.  Respond  to:  HR 
Dept.,  AK  Systems,  Inc.,  100 
Metroplex  Drive,  Suite  303, 
Edison,  NJ  08817.  Email: 
natalya@aksystems-inc.com 


Senior  Computer  Consultant: 
Analyze,  design,  develop,  test  & 
implement  in  Oracle,  C/C++. 
Unix,  NT.  Perl,  CGI,  Netscape, 
Livewire,  Javascript,  Java, 
Client/Server,  MS  technologies, 
OOA/OOD,  distributed  process¬ 
ing,  thin-client;  50-75%  travel 
reqd;  Must  have:  BS  in  comput¬ 
er  science  or  related  field  and  2 
yrs  exp  in  job  offered.  Respond 
to:  G.  Simpson,  HR  Manager, 
700  King  Farm  Blvd.,  Rockville. 
MD  20850  (Refer  to  Code:  BD) 


Opening  for  a  Software  Engineer 
to  design,  develop,  test  internal 
appls  using  VB,  HTML/DHTML, 
ASP.  Javascript,  VBScript,  Active- 
X,  IIS,  etc.  under  Windows  OS; 
evaluate  new  methodologies  and 
develop  plans  for  improving  exist¬ 
ing  systems;  customize  and  mod¬ 
ify  appls  per  user  reqs;  maintain 
documents  and  prepare  program¬ 
ming  specs;  train  users  in  appli¬ 
cation  usage.  Require:  MS  or  for¬ 
eign  equiv.  in  CS /  Comp  Engg  & 
2  yrs  exp  in  IT.  F/T  position. Salary 
commensurate  with  experience. 
Resume  to:  HR,  Learning 
Express,  Inc.,  29  Buena  Vista 
Street,  Ayer,  MA  01432. 


Matrix  Management  Systems, 
Inc.,  is  looking  for: 

Programmer  Analysts: 

Should  have  a  bachelor  s  degree 
in  computer  science/related  field 
with  3+  years  of  experience  in  the 
following:  Java,  JDBC,  J2EE, 
XML.  EJB,  XDI,  Oracle,  Cold 
fusion,  Clear  Quest,  VC++,  DB2, 
CICS,  COBOL,  Rational  Rose, 
WinRunner  and  LoadRunner 

We  accept  foreign  education 
equivalent  of  the  degree,  or  the 
degree  equivalent  in  education 
and  experience. 

Send  Resume  to  Attn:  HR,  932D, 
Atlantic  Ave,  Hoffman  Estates,  IL 
60194. 


Market  Research  Analyst  II: 
Conduct  mkt  research  for  com¬ 
puter  products  &  svcs  to  deter¬ 
mine  potential,  maintain  & 
improve  sales  &  mkt  penetra¬ 
tion.  Establish,  design  &  admin¬ 
ister  formats  for  research  & 
analysis,  prepare  reports  & 
analyses,  &  use  to  determine 
strategy  &  focus.  Train  &  super¬ 
vise  staff  &  junior  analysts. 
Follow  up  to  determine  effec¬ 
tiveness  of  methods  &  efforts  of 
competitors.  BA  or  equiv  +  1 
year.  Respond  to  VP,  HR,  En 
Pointe  Technologies,  100  N 
Sepulveda  Blvd,  19th  FI,  El 
Segundo,  CA  90245. 


SOFTWARE  ENGINEER 
wanted  by  IT  Consulting 
Co.  in  Houston,  TX. 
Must  have  degree  & 
exp.  Respond  by  resume 
only  to:  Mr.  M.  Guest, 
G  /  S - # 1  0  Creek 
Resources  Corp.,  200 
W.  Trower  Blvd,  Ste  4, 
Mannford,  OK  74044. 


Logic  &  Physical  Designer 
wanted  to  plan  &  dvlp  s/ware 
projects.  Will  dsgn  multi¬ 
dimensional  analysis  s/ware, 
provide  consulting  svcs  to 
mgmt,  staff,  customers:  dvlp, 
analyze,  implmt  analytical  & 
computational  techniques  & 
methodologies  for  solution 
of  complex  problems.  BS  in 
Comp  Sci  reqd.  Send 
resumes  to  Beniamino 
Barbieri,  PhD,  ISS  (USA), 
Inc,  1602  Newton  Dr, 
Champaign,  IL  61826.  No 
calls. 


Software  Engineer,  Sr.  - 
Project  mgmt  &  tech,  support 
of  MS  Exchange  application 
hosting  svcs,  design  &  devel¬ 
op  MS  Exchange  products, 
interface  architecture  to  back¬ 
end  relational  server  data¬ 
base  development  for  front- 
end  user  interfaces  for  Web  & 
Windows  apps.  B.S.  or  equiv. 
in  Computer  or  related  Sci  +  2 
yrs  experience.  Must  be  MS 
certified.  Send  resume  to 
Software  Engineer  Position, 
lntermedia.net,  Inc.,  800 
California  St.,  Ste.  200, 
Mountain  View,  CA  94041 


Mechatronics  seeks  software 
developer,  engineers  involved  in 
developing  Knowledge  Based 
Engineering  software  and  tools, 
deploying  KBE/CAD/CAM/CAE 
tools  and  methodologies. 
Applicants  must  have  minimum 
BS  with  some  exp.  Apply  at 
jobs@mechatronics-us.com 

IT  Professionals  is  a  small  but 
stable  company  We  are  looking 
system/programmer  analysts  to 
design  &  administer  web  appli¬ 
cations  &  web  enabled  data 
analysis  Require  BS  Exp  in 
VO+,  COM,  Mainframe  GUI, 
Crystal  is  plus.  Please  send 
resumes  to  pete@itprofs  net 
EOE. 


System  Administrator:  Design, 
implement,  Intel  based  servers/ 
workstations  w/OS  of  Windows 
2000,  XP.  Configure  &  route 
Linksys  routers  and  switches  & 
Proxy  Firewalls.  Maintain  NFS, 
WINS  &  RAID  Array  System. 
Provide  maintenance  &  back¬ 
up/restore  for  servers  using 
Backup  Exec.  Maintain  compa¬ 
ny's  website  and  software  appli¬ 
cations.  Req.  Bachelor  Degree 
or  equivalent  in  Information 
Technology,  CIS  or  related  field. 
Must  be  proficient  in  Backup 
Exec.,  DNS,  FTP,  Windows 
2000  Server,  XML,  SQL  Server, 
DHCP.  40hr/week,  9-5.  Contact 
Law  Offices  of  Jing  Dong,  P  C.  at 
1800  Century  Blvd.,  Suite  915, 
Atlanta,  GA  30345. 


HMSHost,  a  global  traveler  food 
service  co.,  seeks  Computer 
Programmer  IV.  Develop,  design, 
implement,  modify  and  maintain 
business  applications,  using  skills  in 
VB,  UNIX  shell  scripting,  PL/SQL 
SQL  Server  and  Oracle.  Analyze. 
Test  Document  Min.  reqs.  are 
B.S./equiv  in  Computer  Science/ 
MIS  related  field  and  2  years  of 
experience  in  the  duties.  40  hrs/wk, 
Mon-Fri,  8-5.  Excellent  salary.  Email 
resume  with  Job  Code  CP  to: 
resumes@hmshost.com.  (Subject 
line  must  include  Job  Code  CP.) 
eoe/mfdv/dfw.  Absolutely  no  calls. 
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SolutionslQ  seeks  DB  App  Engr 
for  HQ  office  in  Bellevue.  WA 
DESC  Dsgn,  dev.  &  impl.  RDBMS. 
Uls.  components.  &  apps  to  meet 
bus  reqs  &  objs.  Anlyz.  existing 
sys  &  dev  strategies  &  solns  to 
opt  bus  logic  or  flow  Prov  config¬ 
uration  mngment.  Conduct  sys 
arch  &  dsgn  reviews.  Port  &  mi¬ 
grate  data  from  var.  d/b.  &  plats 
Communicate  functional  &  tech 
specs,  reqs.  &  features.  Write 
stored  proc.  &  triggers  &  queries 
Util  SQL.  VB,  C/C++.  C#.  ASP, 
ASPNET,  ADO  NET.  VBScript. 
Jscnpt.  HTML.  COM/DCOM.  XML. 
XSLT,  IIS.  &  Win  o/s.  REQS:  BS  in 
Engr.  CS.  Math,  or  Physics  +  3  yrs 
exp  dsgn.  dev.  &  impl.  RDBMS, 
Uls.  components.  &  apps.  util  SQL. 
VB.  C/C++.  ASP,  VBScript.  Jscnpt. 
HTML.  COM/DCOM.  XML.  IIS.  & 
Win  o/s.  Prem.  sal  +  bones.  Pis 
reply  to  S  Hentschell.  Job  #  SIQ- 
215.  1260-116th  AVE  NE.  Ste.  100, 
Bellevue.  WA  98004. 


Seeking  qualified  applicants  for  the 
following  positions  in  Memphis. 
TN:  Senior  Systems  Programmer 
Serve  as  project/team  leader 
Devise  procedures  to  solve  com¬ 
plex  problems  with  systems/appli¬ 
cations.  Requirements:  Bachelor  s 
degree*  in  computer  science.  MIS. 
engineering  or  related  field  plus  5 
years  of  experience  in  systems/ 
applications  development.  Experi¬ 
ence  with  RDBMS;  software 
design;  and  Java  and/or  C++  also 
required.  'Masters  degree  in 
appropriate  field  will  offset  2  years 
of  general  experience.  Submit 
resumes  to  Sibi  George.  FedEx 
Corporate  Services.  1900  Summit 
Tower  Blvd.,  Suite  1400,  Orlando, 
FL  32810.  EOE  M/F/D/V. 


Programmer/Analyst 
needed  to  design  and 
implement  multi-tier 
applications  using 
COM+,  VC++,  integrate 
with  MS  project,  MSSQL 
server,  and  other 
RDBMS.  Send  resumes 
to  IT@Shrader.net  or 
contact  Craig  Shrader  at 
Shrader  Engineering 
Co.  (713)  465-6502  Fax. 


System  Administrator:  Install,  con- 
fig..  manage  HTTP,  FTP.  SQL,  Mail 
&  DNS  Servers.  &  enterprise  mes¬ 
saging  syst.  Develop  &  implement 
operating  &  maintenance  proce¬ 
dures  for  Web-related  data  ctr. 
equip.,  backup  &  remote  monitoring 
procedures,  using  applicable  net¬ 
work  protocols.  Develop,  config.. 
monitor,  manage  security  mea¬ 
sures  for  IS  &  networks,  incl.  fire¬ 
walls,  VPN  &  antivirus  syst..  & 
monitoring  &  mgmt  tools.  Oversee 
syst.,  database  &  metabase  back¬ 
up  &  mgmt.  Must  be  MS  Cert 
Professional  Respond  SysAdmin 
Position.  Intermedia.net,  Inc.,  800 
California  St..  Ste.  200,  Mountain 
View.  CA  94041. 


Cap  Gemini  Ernst  &  Young  U.S 
LLC  is  currently  seeking  individu¬ 
als  to  fill  Consultant  and  Manager 
positions  in  multiple  locations 
nationwide.  Please  apply  on-line  at 
http://www.us.cgey.com/careers/ 
eRecruit  asp  using  Job  Ref#1181 
for  Consultant  or  #1182  for  Mana¬ 
ger  CGEY  is  an  Equal  Opportun¬ 
ity  and  Affirmative  Action  employer. 
All  qualified  applicants  will  be  con¬ 
sidered  for  employment  without  re¬ 
gard  to  race,  religion,  color,  nation¬ 
al  origin,  age.  sex,  marital  status, 
sexual  onentation.  disability  or  sta¬ 
tus  as  a  Vietnam-era.  special  dis¬ 
abled  and  other  covered  veteran 
status.  NO  PHONE  CALLS 


Principal  Software  Engineer  to  par¬ 
ticipate  in  every  phase  of  analysis, 
design,  implementation,  and  inte¬ 
gration  of  our  proprietary  systems 
to  meet  our  worldwide  technology 
strategy.  Specifically,  will  partici¬ 
pate  in  the  Core  Technology  Group 
in  our  e-Business  Division  to  help 
drive  the  delivery  of  B2B  applica¬ 
tions,  infrastructure  support  of 
Encina-based  applications,  and 
guide  overall  architecture  and 
design  decisions.  Will  participate 
in  the  delivery  of  new  authentica¬ 
tion  and  authorization  framework 
to  unify  several  business  units.  Will 
focus  on  scalable  and  distributed 
systems.  Will  utilize  C++  Java, 
SGML,  XML,  XSL-T,  SOAP.  IBM  s 
WebSphere,  and  communication 
protocols  like  HTTP.  HTTPS,  and 
MOP.  Requires  Bachelors  degree 
in  Computer  Science,  Engineering, 
Mathematics,  or  Physics  and  three 
(3)  years  experience  in  job  offered 
OR  three  (3)  years  experience  in 
developing  client/server  applica¬ 
tions.  Candidate  must  also  pos¬ 
sess  demonstrated  expertise  in 
OOD  (Object  Oriented  Design) 
and  Design  Patterns;  demonstrat¬ 
ed  expertise  in  architecture  of  scal¬ 
able  and  distributed  systems  using 
middleware  tools;  and  demonstrat¬ 
ed  expertise  delivering  B2B  appli¬ 
cations  using  XML  over  HTTP. 
Salary:  $90,500/yr;  Mon-Fri,  9:00 
AM-5:00PM.  Submit  two  copies  of 
resume  to  Case  #:  200116225, 
Labor  Exchange  Office.  19  Stam¬ 
ford  St.,  1st  fl„  Boston.  MA  02114. 
EOE.  Applicants  must  be  eligible 
to  accept  full-time  employment  in 
U.S. 


Senior  Software  Engineer-Work 
with  company's  marketing  and 
technical  staff  to  specify,  design, 
implement,  test,  and  document 
an  XML  storage  engine  built  on 
top  of  the  Berkeley  DB  embed¬ 
ded  database  engine.  Design 
data  management  systems 
deployed  by  customers. 
Implement  an  XPATH  query 
processor,  optimizer,  and  execu¬ 
tion  engine.  Design  and  imple¬ 
ment  XML  data  dictionary  using 
embedded  data  management 
facilities  provided  by  Berkeley 
DB.  Work  with  customers  and 
early  adopters  to  ensure  the 
product  meets  market  demands. 
Conduct  normal  best-practices 
engineering  operations,  includ¬ 
ing  design  and  code  reviews 
and  test  planning  and  evalua¬ 
tion.  Meet  with  customers,  in 
coordination  with  company's 
sales/marketing  groups,  to  pre¬ 
sent  technical  details  of  the  XML 
storage  system  and  assist  in 
product  sales  and  deployment. 
Requirements  include  a 
Bachelor's  degree  or  equivalent 
in  Computer  Science,  an 
Engineering  discipline  or  related 
field  and  six  years  of  work  expe¬ 
rience  in  the  job  offered  or  relat¬ 
ed  field  of  software  engineering. 
Applicants  must  have  unrestrict¬ 
ed  authorization  to  work  in  the 
United  States.  Salary  $100,000/ 
year.  40  hours/wk.  Respond  with 
two  copies  of  resume  to  Case 
#200201663,  Labor  Exchange 
Office,  19  Staniford  St..  1st  FL, 
Boston.  MA  02114. 


Network  &  Systems  Admin¬ 
istrator  needed  at  client 
sites  to  dsgn,  implmt  & 
maintain  LAN/WAN  n/works 
using  Novell  Netware,  Win 
NT/2000,  SCO  Unix  &  con¬ 
figure  CISCO,  Extreme, 
Nortel,  Cabletron  Enterasys 
Make  Routers/Switches, 
TCP/IP,  Sonet,  DNS,  DHCP 
&  others.  Must  be  CNE  & 
CCNA  certified.  Apply  to; 
Global  Consultants,  25 
Airport  Rd,  Morristown,  NJ 
07960. 


Senior  Software  Engineer  - 
Burlington,  MA:  Perform  signifi¬ 
cant  software  product  design, 
developmt,  implementation,  & 
testing  for  eBusiness  applica¬ 
tions.  Design  &  implement  DB 
schema  in  a  transactional  envi¬ 
ronment  for  Oracle  &  MS  SQL 
Server  DBs.  Design,  implement 
&  performance  tune  software  to 
generate  DB  schema  from  mod¬ 
els  &  representations  of  data 
structures,  using  MOF  &  OMG 
stds  to  implement  data  models; 
the  framework  to  map  objects  to 
relational  DBs,  using  UML  & 
Design  Patterns  for  object-ori¬ 
ented  design;  &  the  persistence 
layer  to  provide  access  in  a 
robust,  OO  manner  &  transac¬ 
tion  support  to  the  DB  from  other 
product  components.  Use  RPC 
&  RMI  to  enhance  the  API  pro¬ 
viding  remote  access  to  other 
core  APIs.  Work  closely  w/prod- 
uct  mgmt  &  other  engineers  to 
translate  high-level  customer 
reqmts  into  product  functionality, 
involving  DB  systems,  transac¬ 
tion  techniques,  compiler  tech¬ 
nology,  multi-threaded  program¬ 
ming  in  Java  &  C++,  distributed 
systems  computing,  &  other 
related  technologies.  Develop  & 
document  the  reqmts  in  the 
Functional  Specification. 
Estimate  effort  required  to  imple¬ 
ment  specified  functions  &  track 
progress  against  the  estimate. 
Test  the  software  implementa¬ 
tion  to  assure  quality,  &  support 
the  implementation  during  the 
quality  assurance  phase. 
Minimum  Reqmts:  Master's 
degree  or  equiv.  (will  accept  for¬ 
eign  Master's  degree  or 
Bachelor's  degree  +  4  yrs  of  pro¬ 
gressive  exp.  as  equiv.  to  a 
Master's  degree)  in  Computer 
Sci.  or  Computer  or  Software 
Engr'g,  +  3  yrs  of  exp.  in  the  job 
offered  or  in  jobs  meeting  follow¬ 
ing  reqmts:  3  yrs  of  exp.  in  soft¬ 
ware  product  developmt  in  multi¬ 
threaded  Java  &  C++  for  distrib¬ 
uted  systems,  3  yrs  of  exp.  in  DB 
schema  design  &  implementa¬ 
tion  in  a  transactional  envir.  for 
both  Oracle  &  MS  SQL  Server,  3 
yrs  of  OO  design  using  UML  & 
Design  Patterns,  &  1  yr  imple¬ 
menting  data  models  using  the 
MOF  &  other  OMG  stds.  Exper. 
may  be  gained  concurrently. 
Hours:  M-F,  9  am-5  pm.  Rate  of 
Pay:  $97,000/yr.  Please  submit 
2  copies  of  resume  to:  Case  # 
200201551,  Labor  Exchange 
Office,  19  Staniford  St,  1st  FI, 
Boston,  MA  02114. 


Support  Mgr.  Dallas,  TX.  Manage 
team  of  support  consults  &  pro¬ 
vide  backend  support  in  deploy¬ 
ment,  installation  &  troubleshoot¬ 
ing  of  Amtrix  &  TSIB;  liaison 
w/develop  team  in  integration, 
stress  &  load  testing  of  Amtrix  & 
TSIB  (TradeSync  Integration  Bro¬ 
ker).  Apps  &  tools  include  Web- 
logic,  Exceed,  Amtrix  &  TSIB; 
Oracle  8i  &  9i  on  Unix  &  WinXX 
OS.  Req.  BS  comp  sci  or  related 
field  &  4  yrs  exp  in  apps  consult¬ 
ing,  incl.  2  yrs  w/AMTrix  appl.  inte¬ 
gration,  1  yr  exp  leading  or  man¬ 
aging  support  consults.  Resumes 
to:  M.  Williams,  Viewlocity,  Inc., 
3475  Piedmont  Road.  Suite  1700. 
Atlanta.  GA  30305. 


Software  Engineer:  Design,  de¬ 
velop,  implement,  test  and  main¬ 
tain  software  applications  in  busi¬ 
ness/  manufacturing  systems. 
Expertise  in  Client  server  and 
web  development,  MS  Access. 
SQL  server  database,  Visual 
Interdev,  C++,  VC++,  MFC,  Java. 
Javascript,  ASP,  COM/DCOM. 
DirectX.  Socket  programming. 
UML,  Rational  Rose,  Windows 
NT  &  Unix.  Requires  BS  in  Comp 
Sci.  Engg/Rel  field  with  2  yrs  exp 
Wages:  $66.000/yr,  40  hrs/wk. 
8am-5pm.  Send  2  resumes  to 
Case#200201474.  Labor  Ex¬ 
change  Office.  19  Staniford  St 
Is'  FI.,  Boston,  MA  021 14. 


For  over  20  years,  Syntel  employees  across  North  America,  Europe,  and 
Asia  have  helped  build  advanced  information  technology  systems  for  lead¬ 
ing  Fortune  500  companies  and  government  organizations  to  improve  their 
efficiency  and  competitiveness.  Today,  Syntel  professionals  are  building 
rewarding  careers  by  providing  solutions  in  e-business,  CRM,  Web  Design 
and  Data  Warehousing. 

Come  discover  why  Forbes  magazine  placed  Syntel  second  on  its  list  of 
“The  200  Best  Small  Companies  in  America"  and  Business  Week  ranked 
us  #1 1  on  its  list  of  Hot  Growth  Companies. 

Due  to  our  rapid  growth,  we  have  immediate,  full-time  opportunities  for 
both  entry-level  and  experienced  Software  Engineers,  Consultants, 
Programmers,  Programmer/Analysts,  Project  Leaders,  Project  Managers, 
Supervisors,  Database  Administrators,  Computer  Personnel  Managers 
and  Computer  Operations/Account  Managers/Account  Executives  with 
any  of  the  following  skills: 

Mainframe 

•  IMS  DB/DC  or  DB2,  MVS/ESA, 

COBOL,  CICS 

DBA 

•  ORACLE  or  SYBASE 

Client-Server/WEB 

•  Siebel 

•  Websphere 

•  Com/DCom 

•  Web  Architects 

•  Datawarehousing 

•  Informix,  C  or  UNIX 

•  Oracle  Developer  or  Designer  2000 

•  JAVA,  HTML,  Active  X 

•  Web  Commerce 

•  SAP/R3,  ABAP/4  or  FICO  or  MM 
&  SD 


•  Focus,  IDMS  or  SAS 


•  DB2 


•  Oracle  Applications  &  Tools 

•  Lotus  Notes  Developer 

•  UNIX  System  Administrator 

•  UNIX,  C,  C++,  Visual  C++,  CORBA, 
OOD  or  OOPS 

•  WinNT 

•  Sybase,  Access  or  SQL  server 

•  PeopleSoft 

•  Visual  Basic 

•  PowerBuilder 

•  IEF 


Account  Executives,  Account  Managers  and 
Business  Development/ Account  Specialist 

positions  available. 

Some  positions  require  a  Bachelor's  degree,  others  a  Master's  degree.  We  also 
accept  the  equivalent  of  the  degree  in  education  and  experience. 

With  Syntel  (NASDAQ:  SYNT),  you’ll  enjoy  excellent  compensation,  full  benefits, 
employee  stock  purchase  plan  and  more.  Please  forward  your  resume  and 
salary  requirements  to:  Syntel,  Inc.,  Attn:  Recruiting  Manager-LD05, 

525  E.  Big  Beaver,  Suite  300,  Troy,  Ml  48083.  Phone:  248-619-2800; 
Fax:  248-619-2888.  Equal  Opportunity  Employer. 


S^NirEL 

www.syntelinc.com 
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M  Sales  Offices 


Carol  Lasker,  Associate  Publisher/ Vice  President 
BMl  Jane  Weissman,  Sales  Operations  Coordinator 
JftF  Internet:  clasVer,  jwe19sman@nww.com 

(506)  460-3333  FAX  (SOS)  460-1237  _ 

New  York/  New  Jersey 

Tom  Davis.  Associate  Publisher.  Eastern  Region 
Elisa  Della  Rocco,  Regional  Sales  Manager 
Agata  Joseph,  Sale9  Associate 
Internet:  tdavis,  elisas,  ajoseph@nww.com 
(201)  587-0090/FAX;  (201)  712-9786 


% 

# 


Northeast 

Donna  Pomponi,  Regional  Sales  Manager 
Caitlin  Horgan,  Sales  Assistant 
Internet:  dpomponi,  chorgan@nww.com 
(508)  460-3333/FAX:  (508)  460-1237 


Mid  Atlantic 

Jacqui  DiBianca,  Regional  Sales  Manager 
Marta  Hagan,  Sales  Assistant 
Internet:  jdibian,  mhagan@nww.com 
(610)  971-1530/FAX:  (610)  975-0837 

Midwest/Central 

Eric  Danetz,  Regional  Sales  Manager 
Agata  Joseph,  Sales  Associate 
Internet:  edanetz,  ajoseph@nww.com 
(201)  587-0090/FAX:  (201)  712-9786 


Northern  California 

Sandra  Kupiec,  Associate  Publisher,  Western  Region 

Karen  Wilde,  Regional  Sales  Manager 

Miles  Dennison,  Regional  Sales  Manager 

Maricar  Lagura,  Office  Manager/Sales  Assistant 

Teri  Lowe,  Sales  Assistant 

Internet:  skupiec,  kwilde,  mdennison,  mlagura, 

tlowe@nww.com 

(650)  577-2700/FAX:  (650)  341-6183 


Northwest 

Lara  Greenberg,  Regional  Sales  Manager 
Teri  Lowe,  Sales  Assistant 
Internet:  Igreenberg,  tlowe@nww.com 
(650)  577-2700/FAX:  (650)  341-6183 


Southwest/Rockies 

Becky  Bogart  Randell,  Senior  District  Manager 
Angela  Norton,  Sales  Assistant 
Internet:  brandell,  anorton@nww.com 
(949)  250-3006/FAX:  (949)  833-2857 


Southeast 

Don  Seay,  Regional  Sales  Manager 
Caitlin  Horgan,  Sales  Assistant 
Internet:  dseay,  chorgan@nww.com 
(404)  845-2886/FAX:  (404)  250-1646 


Customer  Access  Group 

Tom  Davis,  Assoc.  Publisher  Eastern  Region/General 

Manager,  Customer  Access  Group 

Shaun  Budka,  Director,  Customer  Access  Group 

Kate  Zinn,  Sales  Manager,  Eastern  Region 

SeanWeglage,  Sales  Manager.  Western  Region 

Sharon  Stearns,  Manager,  Client  Services 

Caitlin  Horgan,  Sales  Assistant 

Internet:  tdavis,  sbudka.  kzinn,  sweglege,  sstearns, 

chorgan@nww.com 

(508)  460-3333/FAX:  (508)  460-1237  _ 


Fusion 

Alonna  Doucette,  Vice  President  Online  Development 
James  Kalbach,  Director,  Online  Services 
Stephanie  Gutierrez,  Online  Account  Manager 
Debbie  Lovell,  Online  Account  Manager 
Kristin  Douglas,  Online  Operations  Manager 
Internet:  adoucette,  jkalbach,  sgutierrez,  dlovell, 
kdouglas@nww.com 
(610)  341-6025/FAX:  (610)  971-0557 


MARKETPLACE 

Response  Card  Decks/MarketPlace 

Richard  Black,  Director  of  Marketplace 
Karima  Zannotti,  Senior  Account  Manager 
Enku  Gubaie,  Senior  Account  Manager 
Amie  Gaston,  Account  Manager 
Chris  Gibney,  Sales  Operations  Coordinator 
Internet:  rblack,  kzannott,  egubaie,  agaston, 
cgibney@nww.com 
(508)  460-3333/FAX:  (508)  460-1192 


IT  CAREERS 

Director,  Nancy  PercivaL  East  Regional  Manager,  Deanne 
Holzer,  Midwest/West  Regional  Manager.  Laura  Wilkinson, 
Sales/Marketing  Associate,  Joanna  Schumann  (800)  762- 
2977/FAX:  (508)  875-6310 


■  Network  World,  Inc. 

118Turnpike  Road,  Southborough,  MA  01772 
Phone:  (508)  460-3333 

TO  SEND  E  MAIL  TO  NWW  STAFF 
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EvileeThibeault,  CEO/Publisher 

John  Gallant,  President/Editorial  Director 

Eleni  Brisbois,  Administrative  Planning  Manager 

FINANCE 

Mary  Fanning,  Vice  President  Finance 

Paul  Mercer,  Finance  Manager 

Betty  Amaro- White,  Event  Finance  Manager 

HUMAN  RESOURCES 

Elizabeth  Price,  Director  of  Human  Resources 
Eric  Cormier,  Human  Resources  Representative 

MARKETING 

TerryAnn  Croci,  Senior  Director  of  Marketing 
Barbara  Sullivan,  Senior  Research  Analyst 
Judy  Schultz,  Senior  Marketing  Designer 
Cindy  Panzera,  Graphic  Specialist 

GLOBAL  PRODUCT  SUPPORT  CENTER 

Nancy  Sarlan-Parquette,  Sr.  Product  Marketing  Manager 

PRODUCTION  SERVICES 

Greg  Morgan,  Senior  Director,  Production  Services 
Karen  Wallace,  Senior  Director,  Advertising  Operations 
Scott  Delugan,  Senior  Production  Coordinator 
JamiThompson, Traffic  Coordinator 
VeronicaTrotto,  Advertising  Coordinator 
Maro  Eremyan,  Advertising  Coordinator 
CIRCULATION 

Richard  Priante,  Senior  Director  of  Circulation 
Bobbie  Cruse,  Subscriptions  Manager 
Mary  Mclntire,  Circulation  Marketing  Manager 

RESEARCH 

Ann  MacKay,  Research  Director 

DISTRIBUTION 

Bob  Wescott,  Distribution  Manager/(508)  879-0700 
IDG  LIST  RENTAL  SERVICES 

Paul  Capone,  Account  Executive 

P.O.  Box  9151,  Framingham,  MA  01701-9151 

(800)  343-6474/(508)  370-0825,  FAX:(508)  370-0020 

SEMINARS.  EVENTS  AND  IDG  EXECUTIVE  FORUMS 

Robin  Azar,  Vice  President  of  Events 

Chris  Shipley, Vice  President/Executive  Producer 

Michele  Zarella,  Director  of  Operations 

Sandra  Gittlen,  Events  Editor 

Neal  Silverman,  Senior  Director  of  Event  Sales 

Andrea  D'Amato,  Sales  Director/Strategic  Partnerships 

Kristin  Ballou-Cianci,  Senior  Event  Sales  Manager 

Sandy  Weill,  Event  Sales  Manager 

Maureen  Riley,  Event  Sales  Manager 

Judy  Tyler,  Sales  Operations  Specialist 

Karyn  Williams,  Managing  Dir.  of  Conference  Development 

Mark  Hollister,  Senior  Director  of  Event  Marketing 

Debra  Becker,  Dir.,  Marketing  &  Audience  Development 

Sara  Evangelous,  Marketing  Manager 

Timothy  Johnson,  Marketing  Specialist 

Tim  DeMeo,  Senior  Operations  Specialist 

ONLINE  SERVICES 

Alonna  Doucette,  Vice  President,  Online  Development 

Hillary  Freeley,  Director,  Online  Operations 

Adam  Gaffin,  Executive  Editor,  Online 

Melissa  Shaw,  Managing  Editor,  Online 

Jason  Meserve,  Multimedia  Editor 

Sheryl  Hodge,  Online  Copy  Chief 

CUSTOMER  ACCESS  GROUP 

Alonna  Doucette,  Vice  President,  Online  Development 
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Fizzer 
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be  these  days,  in  [peer-to-peer]," 
says  Bruce  Hughes,  content 
security  manager  at  1CSA  Labs, 
which  keeps  track  of  thousands 
of  computer  viruses  and  worms 
and  tests  to  see  if  antivirus  soft¬ 
ware  can  eradicate  them. 

The  Windows-based  Fizzer 
worm  —  which  travels  by  way  of 
Microsoft  Outlook,  AOL  Instant 
Messenger  and  IRC,  as  well  as 
Kazaa  —  was  first  seen  early  this 
month  in  Asia  and  Europe.  It’s 
too  early  to  assess  damage, 
though  experts  say  Fizzle  is  the 
most  dangerous  peer-to-peer  en¬ 
abled  worm  to  date  in  that  it  can 


delete  certain  antivirus  programs 
and  contains  a  backdoor  to  let 
an  attacker  compromise  a  mac¬ 
hine  and  record  keystrokes. 

As  of  last  Thursday  Symantec 
said  more  than  150  companies 
had  reported  being  hit  by  Fizzer, 
though  not  necessarily  via  a  peer- 
to-peer  program.  Fizzer  appeared 
to  be  fizzling  by  weeks  end. 

“This  is  one  of  the  more  com¬ 
plicated  worms  we’ve  seen,’’ says 
Mikko  Hypponen,  manager  of 
antivirus  research  at  antivirus 
firm  F-Secure,  which  gave  the 
worm  its  highest  alert  status.’The 
worm  is  200K  bytes  of  code 
spaghetti,  containing  backdoors, 
code  droppers,  attack  agents, 
keyloggers  and  even  a  small 


Network  Associates 
speeds  up  Sniffer 

■  BY  ELLEN  MESSMER 


Network  Associates  this  week  is  scheduled  to  announce  a  protocol 
analyzer  that  boasts  a  packet-capture  rate  four  times  as  high  as  its  pre¬ 
vious  model  and  will  serve  as  a  platform  for  forthcoming  antivirus 
and  intrusion-detection  capabilities. 

The  s6040,  from  Network  Associates’  subsidiary  Sniffer  Technologies, 
will  capture  packets  at  up  to  8G  bit/sec  via  as  many  as  four  full-duplex 
Gigabit  Ethernet  ports,  the  company  says.The  device,  which  competes 
with  offerings  from  vendors  such  as  NetScout  Systems,  will  give  com¬ 
panies  with  high-speed  networks  a  view  of  traffic  patterns  and  appli¬ 
cation  performance  by  monitoring  packets  as  they  zip  by. 

The  appliance,  which  will  cost  from  $50,000  to  $100,000  depend¬ 
ing  on  the  software  modules  used,  is  intended  to  be  the  platform  for 
adding  McAfee  antivirus  protection  and  intrusion  detection  at  an 
undisclosed  future  date.  Last  week,  Network  Associates  completed 
its  acquisition  of  IntruVert  Networks,  which  will  provide  the  foun¬ 
dation  technology  for  intrusion  detection  and  prevention. 

The  state  of  Indiana  has  been  testing  a  beta  version  of  the  s6040  on 
its  Gigabit  Ethernet  backbone,  says  Jeff  Duke,  a  senior  network  engi¬ 
neer  in  Indianapolis.  The  s6040  is  a  much  more  powerful  processor 
than  other  protocol-analyzer  models  the  state  has  used,  he  says. 

“If  you  could  include  both  [Network  Associates’]  RMON  remote  mon¬ 
itoring  analysis  and  intrusion  detection  in  one  box  it  would  be  great 
because  it  would  be  easier  to  manage  than  having  them  separate,” Duke 
says.  He  adds  that  he  is  less  interested  in  running  high-speed  antivirus  fil¬ 
tering  because  the  state  already  has  antivirus  software  deployed  widely 
on  desktops  and  servers. 

Network  Associates  also  is  an¬ 
nouncing  a  new  version  of  its 
management  console,  Network 
Performance  Orchestrator,  which 
will  be  priced  starting  at  $33,000. 

The  nPO  2.0  console  adds  multi¬ 
trace  analysis,  which  lets  man¬ 
agers  sort  through  multiple-seg¬ 
ment  traffic  data  to  quickly  identi¬ 
fy  problems. 


More  online! 


Also  new  is  nPO  Visualizer  2.1,  a 
complementary  product  that  is 
designed  to  be  used  to  determine 
individual  network  use  for  the 
purpose  of  chargebacks  or  to 
help  target  cost  cutting.  It  will  be 
priced  at  $40,000.  ■ 


Firewalls  and  antivirus  protection  are  a 
good  start.  But  if  want  to  secure  your 
network  at  the  core,  you  need  to  do  more. 
Test  Alliance  member  Joel  Snyder  and 
leading  security  companies  show  you  how 
to  protect  the  entire  enterprise. 
DocFinder:  5845 


Web  server.” 

That  Fizzer  can  exploit  Kazaa, 
which  is  considered  the  most 
widespread  peer-to-peer  free¬ 
ware  program  with  an  estimated 
4.5  million  users,  has  worm 
watchers  concerned.  Peer-to- 
peer  programs  are  hard  to 
detect,  so  even  companies  that 
try  to  rid  their  networks  of  such 
programs  and  have  policies 
against  them,  are  at  risk. 

Peer-to-peer  “was  designed  by 
the  underground  community  to 
get  through  the  protections  put 
out  by  the  corporate  commun- 
ity”  says  Doug  Jacobson,  an  Iowa 
State  University  professor  and 
founder  of  Palisade  Systems, 
maker  of  the  PacketHound  gate¬ 
way  for  blocking  peer-to-peer.  He 
says  hackers  even  have  created 
peer-to-peer  freeware  to  take 
over  a  victim’s  machine. 

For  instance,  Kazaa  might  use 
TCP  Port  1714,  and  another  peer- 
to-peer  program,  FastTrack,  might 
use  TCP  Port  1214  to  try  to  make  it 
through  the  firewall.  But  if  those 


Beyond  fizzer 

Security  experts  call 
Fizzer  the  most 
dangerous  worm  to 
date  that  exploits  peer- 
to-peer  programs,  but 
others,  dubbed  Bibrog 
and  Gibe,  also  have  been 
discovered  this  year. 


ports  are  blocked,  the  peer-to- 
peer  applications  can  switch  to 
Web-based  Part  80  or  other  open 
ports,  a  technique  known  as  port¬ 
hopping.  to  traverse  the  Internet 
and  the  corporate  network. 

In  addition,  peer-to-peer  appli¬ 


■ 

The  Fizzer  file 

When  discovered:  This 
month,  initially  in  Asia  and  Eur¬ 
ope,  more  recently  in  the  U.S. 

How  it  spreads:  Kazaa, 
Microsoft  Outlook,  IRC,  AOL 
Instant  Messenger. 

What  it  can  do:  Capture 
a  victim’s  keyboard  strokes, 
kill  antivirus  products,  spoof 
e-mail  addresses,  change 
itself  to  hide. 

What  to  do  if  hit  by  it: 
Apply  Trojan-removal  tools 
from  antivirus  vendors,  if 
possible,  but  might  require  a 
complete  rebuilding  of  the 
machine  to  ensure  it's 
scrubbed. 

cations  constantly  are  being 
modified,  making  it  hard  to 
detect  them, security  experts  say. 
Companies  such  as  Check  Point, 
Internet  Security  Systems  (ISS), 
St.  Bernard  Software,  Symantec 
and  Websense  are  taking  on  the 
peer-to-peer  challenge  through 
products  designed  to  delete  vi¬ 
ruses,  perform  intrusion  detec¬ 
tion,  monitor  at  the  gateway  or 
lock-out  use  of  peer  to  peer  at 
the  desktop  level. 

Encryption  is  being  added  to 
some  peer-to-peer  programs,  mak¬ 
ing  them  even  harder  to  detect. 

“Recently  all  FastTrack  commu¬ 
nication  has  become  encrypted 
and  has  not  yet  been  reverse- 
engineered,”  says  Jeff  Horne,  a 
researcher  at  ISS. 

Monitoring  for  peer-to-peer  at 
the  gateway  level  is  possible  — 
Websense  has  a  gateway  appli¬ 
ance  to  do  this  (it  also  does  URL 
and  content  filtering).  And 
Check  Point  says  the  optional 


SmartDefense  component  in 
FireWall- 1  can  detect  and  block 
peer-to-peer. 

But  both  vendors  say  the  better 
way  to  stop  peer-to-peer  is  to 
block  its  use  on  the  desktop 
through  the  client  software  that 
both  vendors  offer  for  policy 
enforcement.These  are  designed 
to  prevent  unauthorized  applica¬ 
tions  from  running  and  monitor 
for  any  attempt  at  violation. 

“That’s  how  we  caught  some¬ 
one  here  this  week  trying  to 
install  Kazaa,  even  though  it’s 
not  allowed,”  says  Mark 
Kraynak,  Check  Point’s  market¬ 
ing  manager. 

“It’s  easier  to  block  at  the  desk¬ 
top  level  because  many  of  the 
[peer-to-peer]  programs  will 
change  the  ports  they  go  out  on,” 
says  James  Rhodes,  network 
administrator  at  Belz  Enterprises 
a  real  estate  firm  in  Memphis, 
Tenn.  Rhodes  uses  Websense 
desktop  software,  which  he  says 
is  good,  but  doesn’t  catch  every 
variation  on  peer-to-peer. 

The  Billings,  Mont.,  office  of  the 
Indian  Health  Service  of  the  fed¬ 
eral  Department  of  Health  and 
Human  Services  has  installed 
Websense  software  on  a  few 
hundred  employees’  desktops  to 
prevent  peer-to-peer  use,  says 
Ryan  Macdonald, software  devel¬ 
oper  there. 

“We  decided  to  ban  [peer-to- 
peer]  applications  after  we  found 
[peer-to-peer]  use  was  at  4G 
bit/sec  of  traffic  per  hour  for  six 
hours  on  our  network,”  he  says. 

At  The  Weather  Channel, 
which  provides  both  television 
and  Web-based  weather  news, 
peer-to-peer  is  considered 
enough  of  a  potential  problem 
that  the  organization  uses  a 
gateway,  based  on  L7  software 
from  Akonix,  to  detect  and 
block  its  use. 

“We’re  worried  more  about 
[peer-to-peer]  copyright  viola¬ 
tion  than  computer  viruses,  but 
we  do  want  to  prevent  [peer-to- 
peer]  until  someone  claims 
there’s  a  legitimate  use,"  says 
John  Ptenrod,the  news  channel’s 
network  architect.  “And  that 
hasn’t  happened  yet.” 

Bill  Wall,  chief  security  engi¬ 
neer  at  Harris  Corp.,  which 
makes  policy  enforcement  soft¬ 
ware  for  desktops  that  it  says  can 
block  peer-to-peer,  sums  up  the 
issue  this  way:  “People  think 
[peer-to-peer]  file  sharing  is  nice 
and  fun.  But  if  you  don’t  set  it  up 
exactly  right,  you  can  expose  the 
entire  hard  drive.’  ■ 

Get  more  information  online. 
DocFinder:  5945 
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competitor  Intelliden,  approaches  configuration  management  via  the 
software  route.  Companies  install  it  at  a  central  location  and  then 
instruct  managed  devices  to  deliver  syslog  messages  only  when 
changes  are  made.  Rendition  says  that  by  reporting  via  exception,  its 
TrueControl  2.0  software  doesn’t  weigh  down  the  network. 

Gold  Wire  takes  a  different  approach  and  offers  the  Formulator 
200  and  200  HA  appliances.  Last  fall  Gold  Wire  asked  Kevin  Walsh, 
director  of  the  Next-Generation  Internet  Application  Center  at  the 
San  Diego  Super  Computer  Center,  to  take  a  look  at  its  gear.  Now, 
Walsh  says,  the  product  helps  his  staff  experiment  and  research 
network  performance  based  on  configuration  in  the  academic 
organization’s  labs. 

“It  allows  for  uniformity  in  access  and  in  managing  configurations 
across  different  types  of  equipment  and  with  different  skills,”  Walsh 
says.  He  adds  that  he’d  like  to  see  Gold  Wire  and  others  add  more 
support  for  network  gear  from  newcomers  such  as  ForcelO  Networks, 
which  makes  10G  Ethernet  products.“It’s  not  that  difficult  to  configure 
it  to  support  other  gear  as  a  customer,  but  Gold  Wire  will  want  to  offer 
the  broad  range  of  support  to  its  customers,”  he  says.  ■ 
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Project  particulars 

Last  April,  three  early  adopters  detailed  for  Network  World  their  burgeoning  Web 
services  projects  and  their  hopes  for  the  future.  A  little  more  than  a  year  later,  two 
say  Web  services  are  turning  into  a  major  success,  while  the  third  is  hoping  to  revive 
its  project  sidetracked  by  more  pressing  needs. 

Early  adopter 

April  2002 

May  2003 

Outlook 

Eastman 

Chemical 

Web  services  made  East¬ 
man's  product  catalog 
available  to  customers  and 
partners  in  realtime. 

'  : 

1... .  .  . . 

Original  rollout  intact,  including 
hosted  infrastructure  to  ensure 
security,  transactional  integrity 
and  nonrepudiation;  focus  now 
on  building  service-oriented 
architecture  for  Web  services. 

Exploring  caching, 
monitoring,  process 
workflow  and  registry 
technology  to  support 
applications  built  using 
multiple  Web  services. 

Galileo 

International 

Testing  fourWeb  services 
that  supply  data  on  itinerary, 

;  booking,  airport  and  desti¬ 
nation  information,  and 
aircraft  status  after  takeoff. 

Now  35  customers  using  Web 
services  to  support  travel 
applications;  Web  services 
available  globally  for  first  time; 
Galileo  is  building  out  a  service- 
oriented  architecture. 

Customer  base  growing 
rapidly;  expects  to  cut  costs 
by  50%  based  on  reusability 
of  Web  ser-vices 
components  in  developing 
new  applications. 

University  of 

California, 

Berkeley 

Using  Web  services  for 
unified  communications 
system  that  ties  together 
e-mail,  voice  mail  and  fax  in 
a  single  in-box  with  access 
from  e-mail,  telephone  or 
mobile  device. 

Project  has  been  shifted  to 
another  platform  with  an 
interface  that  meets  require¬ 
ments  under  the  Americans 
with  Disabilities  Act. 

Web  services  on  hold  but 
seen  as  architecture  that 
will  carry  infrastructure  into 
the  future. 

Web  services 
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when  the  hype  meter  on  the 
emerging  technology  was 
redlining.  Now,  as  we  revisit 
them,  Galileo  and  fellow  early 
adopter  Eastman  Chemical  are 
sold  on  the  technology  and  are 
pushing  on.  The  third  organiza¬ 
tion  —  the  University  of 
California,  Berkeley  —  has 
shelved  Web  services  for  now, 
although  the  school  expects  to 
return  to  it  down  the  road. 

Paying  off 

Organizations  such  as  travel 
agencies  and  corporate  travel 
planners  report  development 
times  have  been  reduced  by  80% 
to  90%  for  building  applications 
that  extract  data  and  execute 
transactions  on  Galileo’s  Global 
Distribution  System  (GDS),  the 
hub  of  its  business. 

“A  single  availability  call  to  our 
GDS  has  been  reduced  from  100 
lines  of  code  to  just  three  with 
Web  services,”  says  Rick  Wise¬ 
man,  CTO  for  Galileo. 

And  they’re  finding  creative 
uses  for  Web  services  that 
Galileo  never  imagined,  such  as 
automating  touchless  ticketing 
for  travelers,  streamlining  corpo¬ 
rate  back-office  operations  and 
altering  their  workflow  processes 
for  more  efficiency 

Also,  expensive  dedicated  lines 
have  now  been  replaced  by 
Internet  access. 

Galileo  says  there  has  been  a 
bigger  effect  internally,  where  the 
Web  services  slashed  the  cost 
and  development  time  of  a 
dozen  new  products  last  year  by 
up  to  50%. 

It  has  added  up  to  millions  of 
dollars  in  savings  and  additional 
revenue. 

Reuse  of  Web  services  compo¬ 
nents  and  increased  flexibility  are 
big  themes  and  have  touched  off 
development  of  an  SOA.  An  SOA 
consists  of  application  compo¬ 
nents  that  live  as  services  on  a 
network  and  can  be  assembled 
in  infinite  combinations. 

The  company  has  built  an 
authentication  and  authorization 
gateway  it  calls  Expo  and  a  ser¬ 
vice  brokering  engine  that  will 
form  one  secure  entry  point  for 
all  Web  services  calls  to  the  GDS, 
which  handles  350  million  mes¬ 
sages  per  day  and  more  than  1 
billion  fare  quotes  per  year. 

“We  will  have  different  conver¬ 
sion  <  apabilities  to  go  from  XML 
to  Java  and  back  again,  different 
brokering  technologies,  different 
service-delivery  network  tech¬ 


nologies,”  Wiseman  says.  “We  will 
need  to  validate  things  like  inter¬ 
operability  where  we  can  do  log¬ 
ging  and  so  on.”  He  expects  to 
have  the  SOA  reference  imple¬ 
mentation  done  this  year  and  a 
production  model  in  2004. 

“Building  toward  a  common 
standardized  SOA  gives  us  huge 
benefits  for  reusability  across  the 
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Read  the  original  profiles  about  these 
Web  services  pioneers  from  last  year. 
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company?’ Wiseman  says.  “As  new 
product  requirements  come 
about,  you  don’t  have  to  start 
from  a  whiteboard  anymore.  You 
can  assemble  products  from 
existing  components.” 

Seeing  the  internal  light 

The  SOA  idea  also  caught  the 
attention  of  Eastman  last  year. The 
Kingston,  Tenn.,  company’s  Web 
service  debuted  last  year  and  lets 
customers  get  product  informa¬ 
tion  in  real  time  instead  of  the  old 


way  of  copying  or  screen  scrap¬ 
ing  data.  That  service  is  relatively 
unchanged, but  it  has  turned  on  a 
new  light. 

“We  started  to  apply  Web  ser¬ 
vices  to  projects  internally, and  we 
recognized  the  need  for  Web  ser¬ 
vices  management  as  we  started 
to  build  more  complex  applica¬ 
tions,”  says  Carroll  Pleasant, 
Eastman’s  principal  technologies 
analyst.  He  says  security  monitor¬ 
ing,  caching,  process  workflow, 
failover  and  a  registry  of  available 
services  became  necessary  after 
the  company  built  a  couple  of 
applications,  including  one 
called  Management  Scorecard 
that  integrates  23  internal  Web 
services. 

The  application  collects  finan¬ 
cial  data,  manufacturing  informa¬ 
tion  and  external  data  on  topics 
such  as  federal  legislation,  and 
compiles  it  into  one  interface  for 
company  executives. 

“Scorecard  has  brought  us 
a  pretty  good  understanding 
around  Web  services,”  Pleasant 
says.’After  we  built  the  first  couple 
of  things,  we  backed  up  and  said 
we  need  a  services  architecture, 
we  need  to  know  what  it  takes  to 
put  all  this  together  for  service 
component  reuse.” 

The  company  has  appointed  an 
architecture  team  to  understand 
the  SOA  design  philosophy  and 
investigate  what  it  will  take  to 
build  one. 

“This  is  a  major  project  and  re¬ 
shaping  of  the  mechanism  for 


application  delivery?’ he  says. 

So  far  the  team  has  a  prototype 
that  is  getting  heavy  use  and  is 
working  on  how  to  build  the  SOA 
in  production. 

“We’re  finding  that  this  can 
change  a  lot  of  what  we  do 
internally”  Pleasant  says.  “How 
does  this  affect  our  software 
quality  assurance?  Those  [qual¬ 
ity  assurance]  tests  are  done 
from  a  user  perspective,  but 
what  if  your  Web  service  does 
not  have  a  user  interface?  How 
do  we  test  that  service?  It  will 
be  a  substantial  change  in  how 
we  test  our  apps  because  they 
now  may  be  headless.” 
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The  questions  intrigue  Pleasant 
because  he  knows  the  company 
eventually  will  have  an  SOA  in 
place. 

“The  whole  idea  is  changing 
from  building  a  single  Web  ser¬ 
vice  to  building  an  application 
that  is  constructed  from  a  suite  of 
Web  services,”  he  says. 

Not  the  right  time 

For  the  University  of  California, 
Berkeley  those  lessons  will  have 
to  come  later.The  school’s  unified 
messaging  project  was  piloted  on 
a  Web  services  platform  that  tied 
together  e-mail,  voice  mail  and 
fax,  and  provided  a  call-routing 
feature  the  communications  sys¬ 
tem  did  not  have. 

But  the  pilot  project  revealed 
that  the  user  interface  did  not 
meet  requirements  under  the 
Americans  with  Disabilities  Act, 
and  the  school  had  to  switch  to 
another  product  that  does  not 
use  Web  services. 

“Web  services  was  working 
beautifully’  says  Terri  Kouba,  sys¬ 
tems  developer  at  the  university  A 
year  ago,  she  recognized  the  flexi¬ 
bility  Web  services  provided  in 
that  the  university  did  not  have  to 
lock  into  one  product.  It  could 
lash  together  the  communica¬ 
tions  systems  it  already  had, 
including  a  leased  PBX  from 
Pacific  Bell. 

Now  she  has  that  single  prod¬ 
uct,  and  she  says  she  hasn’t  done 
anything  with  Web  services. 

“1  would  prefer  that  our  new 
technology  be  on  Web  services,” 
she  says.  “That  seems  to  be  the 
technology  that  would  carry  us 
into  the  future  the  farthest."  ■ 
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BackSpin  Ma^G^s 

This  OS  walks  up  to  a  tablet  and 


ell  it  turns  out  the  Associated 
Press  story  I  mentioned  last 
week  about  Microsoft’s  U.K. 
MSN  division  developing  the  iLoo,  a 
portable  toilet  with  Internet  access, 
was  a  hoax,  or  so  Microsoft  said  last 
Monday.  It  was  just  some  crazy  joke. 

But  wait.  Come  Tuesday  Microsoft 
was  reversing  itself  again, saying  the  UK.  office  had 
indeed  designed  such  a  product. When  headquar¬ 
ters  found  out  about  it  from  news  reports,  it  nixed 
the  project  for  fear  of  branding  repercussions. 

This  was  all  very  odd  but  it  seems  so,  well,  in  keep¬ 
ing  with  Microsoft  these  days.The  company  seems 
to  be  going  in  a  gazillion  directions  simultaneously 
and  not  thinking  everything  all  the  way  through. 

Take  Windows  XP  Tablet  Edition. 

I  opined  about  tablets  many  months  ago  (www. 
nwfusion.com,  DocFinder:  5936), and,  at  the  time,  I 
expressed  my  doubts  about  how  good  XP  Tablet 
Edition  would  be.  Well,  thanks  to  Fujitsu,  I  have  had 
the  opportunity  to  play  with  the  operating  system  on 
quality  hardware. 

I  took  an  extended  test  drive  after  writing  about  a 
program  called  Mind  Manager  in  my  Network  World 
“Web  Applications”  newsletter.  Mind  Manager  is  for 
creating  and  editing  “mind  maps,”  which  are  used  to 
diagram  your  thoughts  on  a  topic  and  are  a  very 


effective  tool  for  creative  thinking. 

Mind  Manager  2002  from  Mindjet  (www.mindjet. 
com/us/)  is  the  best  tool  on  the  market,  and  when 
the  company  said  it  was  releasing  a  version  specifi¬ 
cally  for  the  XP  Tablet  Edition  I  thought  this  would 
be  a  way  to  test  the  whole  tablet  concept. 

So  1  contacted  Fujitsu,  which  loaned  me  a  Stylistic 
41  lO.This  is  a  nice  piece  of  hardware. Arguably  a  lit¬ 
tle  heavier  than  the  ideal  tablet,  but  it  has  a  reason¬ 
able  battery  life  (about  5  hours),  a  good  screen  and 
good  performance.The  pen  also  feels  pretty  good  on 
the  screen  —  just  enough  drag  to  be  close  to  paper 
and  thus  feel  comfortable  for  writing. 

But  I  have  three  major  complaints.  First,  when  I 
used  it  as  a  notepad  on  a  table  and  angled  it  off  to 
the  side  to  line  up  with  my  arm  as  you  would  a  pad 
of  paper,  the  screen  was  hard  to  read. 

Related  to  the  screen  issues  is  my  second  com¬ 
plaint:  The  pen  tip  “floats”  above  the  mouse  pointer 
because  of  the  thickness  of  the  screen  glass,  which 
makes  positioning  difficult  at  times. 

The  third  was  that  the  machine  takes  too  long  to 
wake  up.  I  used  it  at  a  seminar  and  in  power-saving 
mode  it  would  go  to  sleep. Then  when  I  went  to 
make  a  note  I’d  have  to  wait  too  long  for  it  to  wake 
up,  which  made  the  tablet’s  use  somewhat  stilted. 

As  for  MindManager  2002  for  Tablet  PC,  it  is  a  good 
product;  great  for  taking  structured  meeting  notes, 
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but  limited  by  the  operating  system  services. 

So  it  is  with  XP  Tablet  Edition  that  I  have  my  big 
complaints.This  version  is  just  XP  with  support  for  a 
pen  interface  and  handwriting  input  and  translation 
services.  Microsoft  and  most  of  the  pen  application 
vendors  don’t  appear  to  have  thought  too  deeply 
about  usability 

One  of  my  many  irritations  about  the  user  inter¬ 
face  is  that  when  you  tap  on  a  Windows  menu  with 
the  pen,  the  menu  opens  under  your  hand. 

If  you  try  a  tablet  you’ll  find  that  moving  the  Win¬ 
dows  Start  menu  to  the  right  side  of  the  screen  (if 
you’re  right-handed)  opens  menus  away  from  your 
hand,  which  is  more  comfortable.  Unfortunately,  no 
such  reconfiguration  is  available  for  menus  in 
applications  that  use  the  conventional  Windows 
user  interface. 

I  contend  the  operating  system  doesn’t  really  do 
what  users  want  from  a  pen  interface.  It’s  like  taking 
a  truck,  putting  racing  overalls  on  the  driver,  paint¬ 
ing  a  stripe  down  the  side  and  claiming  it’s  a  race 
car.  It  will  go,  but  it  won’t  get  there  as  fast  as  you 
hope  and  the  overhead  of  not  being  optimized  for 
the  task  make  it,  at  best,  an  also-ran. 

Perhaps  like  the  iLoo,  XP  Tablet  Edition  also  was 
meant  as  a  joke. 

Funny  stories  to  backspin@gibbs.com. 
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Buzz 


News,  insights,  opinions  and  oddities 


By  Paul  McNamara 

The  e-mail  never  stops 

The  e-mail  has  been  piling  up  faster 
and  higher  than  did  the  snow  this  past 
winter. . . .  OK,  not  quite  that  fast  or  high,  but  plenty.  Let’s  share  a  few  excerpts: 

Martin  Erwin  writes  to  disagree  with  a  column  that  spanked  California 
Congressman  Darrell  Issa  for  trying  to  reverse  an  Army  plan  to  build  a  wireless 
network  in  postwar  Iraq  based  on  GSM  technology,  which  is  standard  throughout 
the  Middle  East.  Issa  and  others  were  touting  technology  owned  by  Qualcomm, 
which  also  happens  to  be  a  major  contributor  to  Issa’s  campaign  coffers.  The 
issue  also  got  all  mixed  up  in  the  France-bashing  that's  in  vogue. 

"Issa's  comments  may  be  self-serving,  but  there  are  definitely  reasons  to  sup¬ 
port  the  position,”  Erwin  says.  "The  European  Union  is  definitely  attempting  to 
compete  with  the  U.S.,  and  this  is  more  the  issue  rather  than  deployment  of  a 
particular  technology." 

David  Smith  writes  to  accuse  me  of  going  overboard  in  support  of  a  handful  of 
small  e-commerce  site  operators  who  are  being  unfairly  sued  for  patent  infringe¬ 
ment  His  rather-amusing  rebuke  included  the  charge  that  I  had  infringed  on  a 
patent  of  his  called  “Apparatus  and  method  for  restraining  poor  journalism.” 

“Seriously,  there  are  good  patents  and  there  are  bad  patents.  You  should  not  be 
lumping  all  patents  into  the  category  of  bad,”  Smith  writes. 

I  agree,  which  is  why  the  column  did  no  such  thing. 

“Bad  patents  are  very  easy  to  'invalidate'  if,  in  fact,  they  are  bad,”  Smith  contin¬ 
ues  A  request  for  a  re-examination  is  quite  affordable,  approximately  $2,500, 

and  can  be  completely  anonymous." 

Anorner  reader  named  Robert  takes  issue  with  me  suggesting  that  participants 
in  a  new  online  hobby  —  baiting  Nigerian  spam  scammers  —  might  have  too 

much  idle  time. 

‘Tve  stopped  judging  whether  people  have  too  much  time  on  their  hands," 


Robert  says.  "Some  people  watch  a  lot  ofTV,  some  people  play  golf,  some  people 
commute  two  hours  a  day,  and  some  people  bait  spammers.  Who  are  we  to  pass 
judgment?” 

Interesting  philosophy,  but  in  my  line  of  work  the  alternative  to  passing  judgment 
is  unemployment. 

After  an  unflattering  item  here  about  EarthLink,  David  Schaffer  writes  to 
defend  —  in  a  backhanded  way  —  the  ISP's  customer  service.  - 

"EarthLink’s  support  burden  may  be  related  to  the  fact  that  they  are  the  ISP  for 
cable  systems,  such  as  Charter  Communications,  which  are  completely  clueless,” 
Schaffer  writes.  "I  frequently  have  to  call  EarthLink  support  for  problems  that  are 
really  the  cable  company’s  because  with  EarthLink  I  get  an  actual  technician,  not 
a  customer  service  rep  reading  a  troubleshooting  script.  Often  EarthLink  knows 
that  there  is  a  DNS  or  DHCP  problem  on  the  cable  system  before  the  cable  com¬ 
pany  does.” 

A  recent  column  jumped  all  over  a  nationally  syndicated  writer  for  pooh- 
poohing  the  Internet  as  being  much  ado  about  very  little.  By  way  of  comparison, 
Schaffer  writes,  loss  of  the  Internet  would  be  nowhere  near  as  significant  as  los¬ 
ing  the  ability  to  drive. 

Reader  Jay  Jordan  backs  up  Buzz  on  this  one.  "If  the  Internet  collapses  tomor¬ 
row,  the  far-reaching  consequences  on  communications,  financial  and  military 
systems  would  devastate  the  global  economy  on  a  unimaginable  level,”  Jordan 
says.  "And  at  that  point,  who  cares  if  I  can  still  drive  my  car?" 

Finally,  an  item  about  a  forthcoming  “smart”  wristwatch  from  Microsoft  and 
three  watchmakers  had  Wei  Wang  thinking  about  the  practical  implications. 

"What  I  wonder,  though,  is  if  the  watch  runs  Windows.  If  so,  what  happens  if 
one  needs  to  reboot  it?  Doing  Ctrl+Alt+Del  on  a  little  watch  every  day  would  be 
really  annoying." 

Now  that  we've  made  room  in  the  in-box,  feel  free  to  send  more.  The  address  is 
buzz@nww.com. 


An  increasingly  mobile  workforce 
opens  your  network  up  to  a  host  of  threats, 
both  accidental  and  intentional. 


The  only  place  to  securely  meet  the  challenges  that  a  mobile 
workforce  brings  to  a  network  is  at  the  point  where  people  connect. 
The  HP  ProCurve  Adaptive  EDGE  Architecture  affordably  puts 
intelligence  and  control  at  the  edge  of  the  network,  giving  you  the 
power  to  easily  adapt  to  future  needs  as  new  wired  and  wireless 
mobility  solutions  are  implemented. 

With  industry-standard  switches  like  the  HP  ProCurve  5300x1  series, 
you  can  cost-effectively  deploy  user  and  security  applications  at  the 
point  of  connection.  It  immediately  recognizes  the  user  and  the  types 
of  services  and  access  they  are  permitted  to  have,  preventing 
unauthorized  traffic  and  potential  threats. 

Free  Network  Design  To  schedule  a  free  network  design  and  to 
learn  how  HP  ProCurves  affordable  solutions  can  help  you  meet 
current  and  future  needs  for  mobility,  security  and  convergence, 
call  1-800-975-7683  or  visit  hp.com/qo/procurve. 
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101101010101 

101011011011 

Pronto 

001101110101 

Hallo 

101011010111 

Alo 

101101110101 

101101110101 

Haloo 

101011010111 

Alo 

101101110101 

>  Wvn  your  bus  ness  VOICE  SERVICES  and  your  business  DATA  SERVICES  come  from  one  company  on  one  global  network,  they  work  better  TOGETHER, 

MCI 


Call  for  service  availability 


www.mci.com 


